Notice Regarding the Restoration of Credit Card Functionality

Notice Regarding Restoration of Credit Card Payment Function

Dear Customer 

We have received approval from the credit card company for the security measures we have implemented, and our company will resume credit card payment functionality from 8:00 on April 28. We would like to offer our sincerest apologies for the inconvenience and concern caused to all customers. We will continue to take every possible security measure to ensure the safety of our customers' shopping experience, and we ask for your continued support. 

 1. Background of the Incident 

As reported on March 29 in "Apology and Notice Regarding Credit Card Information Leaking," due to unauthorized malicious access, credit card information of some customers on our website was leaked. We take this situation very seriously and have implemented measures to prevent the same issue from happening again. After certification by a third-party investigation agency and review by the credit card company, we have decided to resume credit card payment functionality on the premise of ensuring customer payment security. 

 2. Measures Implemented to Improve Payment Security 

To prevent similar incidents from occurring again in the future, we have taken the following measures. 

• Vulnerabilities in the file upload function have been fixed, and SELinux has been enabled to improve security against tampering. (December 2020) 
• The servers have been migrated to a secure public cloud environment consisting of the latest operating system and middleware. (December 2020) 
• A high-performance firewall (WAF) has been installed, and measures have been taken to block unauthorized access and attacks. (January 2021) 
• Two-factor authentication has been introduced for the server environment and administrative tools. (February 2021) 
• Antivirus software has been installed on the servers, and virus scans are performed regularly. (February 2021) 
• Critical operating system/middleware-level patches are installed regularly. (March 2021) 
• A FIM (File Integrity Monitoring) solution has been introduced to detect file tampering. (April 2021) 
• In addition, we have implemented various security enhancement measures, established an information security system compliant with PCI DSS requirements, and rebuilt our operations and monitoring systems. 

 3. Future Actions 

First, we will make every effort to strengthen security and monitoring so that customers can use the website safely. The credit card company is currently analyzing the actual cases of improper use of credit cards by each company and will report to us by the end of August. Once again, please be assured that we will fully compensate you for any losses and card replacement fees incurred as a result of this incident. 

 4. For inquiries regarding this incident, please contact us at the following 

Design X Inc. Customer Service Desk 

 Business hours: 8:00 to 17:00 (Beijing, Hong Kong, and Taipei time, excluding Saturdays, Sundays, and holidays) 

 Phone number: +81-3-6285-2811 

 Email address: contact@designx.co.jp

End