Dear Neokyo customers,
We wish to inform you about a recent cyber incident that occurred on December 25th at 5:45 PM JST (about 120 minutes ago).
During this incident, our servers were subjected to a Distributed Denial of Service (DDoS) attack.While investigating this attack, we discovered evidence that the attacker may have gained limited access to certain parts of our user data.
Our initial investigation does not lead us to believe the database was compromised, but the hacker might have used other means to have access to some of our user data.The extent of the leak is unknown, so as a matter of safety, please follow the below steps to ensure your data security.
Important Note:
No financial information was compromised. Neokyo does not store any credit card or banking data.
The potential impact is limited to:-Email addresses-Crypted Passwords (the passwords as crypted on our database. It is not yet clear if the hacker could decrypt the passwords by other means)-Purchase history-Shipping addresses-Other data available on the user account interface (wishlist..)
To safeguard your accounts, we strongly recommend the following:
1) Change your Neokyo password immediately once we announce the end of maintenance.This will happen after we make sure any existing vulnerability is found and fixed. We will announce the end of maintenance on our SNS and by email. Note that we do not have a clear ETA on that yet.
2) Change your passwords for any other accounts that use the same email address as your Neokyo account. Use 2FA when you can.
3) Just in case, change your PayPal password, if you use the same credentials between PayPal and other websites.
We understand that this news may cause concern, and we sincerely apologize for any inconvenience this incident may cause.
The security of our customers' information is our top priority. Our technical team is actively investigating this incident and taking steps to enhance our security measures to prevent future occurrences, while fixing the existing vulnerabilities.
If you have any questions or concerns, please do not hesitate to contact our customer support team on Discord or Twitter while the website is down for maintenance.
Sincerely,
The Neokyo Team
