Update: Crypton now says customer data may have been exposed in the SONICWIRE/D2R breach. Up to ~420,000 records belonging to SONICWIRE members and newsletter subscribers may have been viewed or taken. The data that may be exposed includes names, email addresses, hashed passwords, addresses (only if entered for invoices or quotes), and account metadata such as registration and last login dates. For newsletter-only subscribers, the exposure is limited to email addresses and subscription data. Crypton says SONICWIRE and D2R don't store credit card details, and no card leak has been confirmed. It is still checking whether past payment information was affected. According to the notice, the possible intrusion was spotted around 20:00 JST on October 17. Crypton disabled compromised accounts, put IP restrictions on its internal domain, and finished shutting down the affected servers at about 23:39. It says it used Mythos to assess the situation after detection, and no further unauthorized access has been seen since. All account passwords have been invalidated. Crypton notified the police on October 18 and reported the incident to Japan's Personal Information Protection Commission on October 19. There's no date for restoring the services yet, and the SONICWIRE-related online store has also been taken offline during the investigation. An outside firm will be brought in for a more detailed investigation.