Dear Kakobuy Famil
🥮 Happy Mid-Autumn Festival!
The entire Kakobuy team wishes you and your family joy, health, and togetherness.
We are writing to address a recent security incident involving unauthorized messages sent from one of our purchasing accounts and temporary unauthorized balance deductions on a small number of user accounts.
Our security team took immediate action upon detection. Below is a full summary of the event, the resolution, and the steps we are taking to further reinforce our platform security.
🔍 1. Incident Overview
The incident occurred due to a credential compromise of a purchasing staff account responsible for assisting users with customized orders.
As part of daily operations, this staff member frequently processes user-submitted custom links. Unfortunately, they were targeted by a phishing exploit embedded in a malicious submission, resulting in compromised account credentials.
Using these stolen credentials, the party sent unauthorized system messages to users and initiated improper balance deductions on a limited number of accounts.
🛡️ 2. Immediate Resolution & Data Protection
💰 Full Balance Restoration
All incorrectly deducted balances have been 100% refunded and restored to the affected user accounts.
Please check your account dashboard. If you notice any discrepancies, please reach out to our Live Customer Service for immediate priority assistance.
🔐 Data Erasure
We reached an understanding with the security researcher involved, and all related data and backups have been fully purged and securely destroyed.
🔗 Feature Evaluation
Due to the security risks associated with unverified third-party links, we are actively evaluating whether to restrict features related to “Custom Orders.”
⚙️ 3. Future System Upgrades & Security Hardening
To prevent similar incidents, we are implementing immediate infrastructure and security enhancements:
🔒 System Authorization Upgrade
Re-architecting purchasing system permissions, introducing mandatory Multi-Factor Authentication (MFA), and enforcing strict rate-limiting on high-risk endpoints.
👨💻 Staff Safety Training
We have implemented mandatory cybersecurity training for procurement staff and utilize isolated sandbox environments for handling external links.
🎁 4. Our Apology and Mid-Autumn Festival Gift Pack
We sincerely apologize for any inconvenience caused during this period.
To express our sincere apologies and gratitude for your continued support, we have prepared a special Mid-Autumn Festival gift pack for all Kakobuy members. 🌕🥮
🎁 Claim Your Kakobuy Coupon Pack
Coupon Code: KAKOMOON
Includes:
🚚 1 × Shipping Coupon
💰 1 × ¥200 Shipping Coupon (for orders over ¥1,500)
💰 1 × ¥150 Shipping Coupon (for orders over ¥1,000)
💰 1 × ¥100 Shipping Coupon (for orders over ¥500)
🎟️ 1 × ¥50 Shipping Coupon
🎟️ 1 × ¥30 Shipping Coupon
🎟️ 1 × ¥20 Shipping Coupon
📌 Enter code KAKOMOON in your Kakobuy User Center to claim your coupon pack. 🌕 Wishing you and your family a Happy Mid-Autumn Festival! Thank you for your patience, understanding, and continued support as we strive to make Kakobuy safer and provide a better experience for everyone.
Happy shopping! The Kakobuy Team 🚀
