Notice Regarding the Resumption of Credit Card Payments

Notice Regarding the Restoration of Credit Card Functionality

Dear Customer

We have received approval from the credit card company for the security measures we have implemented, and credit card payment functionality will be restored starting at 8:00 on April 28. We sincerely apologize for the inconvenience and concern caused to all customers by this matter. We will continue to take all possible security measures to ensure safe shopping for our customers, and we ask for your continued support.

1. Background

As reported on March 29 in "Apology and Notice Regarding Credit Card Information Leaking", unauthorized malicious access caused the leakage of credit card information for some customers on our website. We take this matter very seriously and have taken measures to prevent the same problem from happening again. After certification by a third-party investigation organization and review by the credit card company, we have decided to restore the credit card payment function on the premise of ensuring customer payment security.

2. Measures Implemented to Improve Payment Security

• To prevent similar incidents from occurring again in the future, we have taken the following measures.
• Vulnerabilities in the file upload function have been fixed, and SELinux has been enabled to improve security against tampering. (December 2020) 
• The server has been migrated to a secure public cloud environment consisting of the latest operating system and middleware. (December 2020)
• A high-performance firewall (WAF) has been installed, and measures have been taken to block unauthorized access and attacks. (January 2021)
• Two-factor authentication has been introduced for the server environment and management tools. (February 2021)
• Antivirus software has been installed on the server, and virus checks are performed regularly. (February 2021)
• Critical operating system/middleware-level patches are installed regularly. (March 2021)
• An FIM (File Integrity Monitoring) solution has been introduced to detect file tampering. (April 2021)
• In addition, we have implemented various security improvement measures, established an information security system compliant with PCI DSS requirements, and rebuilt our operations and monitoring systems.

3. Future Actions

First, we will make every effort to strengthen security and monitoring so that customers can use the website safely. The credit card company is currently analyzing the actual status of improper use of credit cards at each company and will report to us by the end of August. Once again, please rest assured that we will fully compensate you for any losses and card replacement fees incurred as a result of this incident.

4. Inquiries Regarding This Matter

Please contact the following for inquiries.

Design X Inc. Customer Service Desk

Business hours: 8:00 to 17:00 (Beijing, Hong Kong, and Taipei time, excluding Saturdays, Sundays, and public holidays)

Telephone: +81-3-6285-2811 

Email address: contact@designx.co.jp

End