The BIN sat next to twenty million

August’s 8.85 million grew. The new number is a person count, and a partial card.

E-store, a BASE subsidiary, closed the Shopserve incident in a final notice dated 16 October. About 23,356,000 people. 7,858 shops. The first public ceiling, in August, was about 8.85 million. The window they now give is 21 May to 1 August. A vulnerability in an application on the server, a program that should not have been there, a database sent out. An outside firm, they say, has not found the set on the dark web.

About 2,096,900 of those people have card data in the row: first six digits, last four, the name on the card, the expiry. That is not the full number. It is also not “no cards.” The rest of the 23 million are buyers and operators without that slice. Do not add the shops to the people and call it 23 million shops.

What 2.1 million partial cards will be asked to cover

It will be briefed as every PAN in Japan. The middle of the number is not in the notice. It will be briefed as BASE’s marketplace. Shopserve is the EC builder. A shop that never ran on this platform is out. A buyer who used a shop that did may be in, including people who only appear because the first ceiling was too small.

If a shop mailed you, the fields they listed are the incident. First six and last four plus a name is enough for a mail that pretends to be the shop and asks for the middle. Do not type the middle. The company’s “not seen on the dark web” is a look, not a promise about next week.

Twenty-three million is the person count after they finished counting. The BIN is the part that keeps working after the shop looks normal.