Rakuten, for months, perhaps more than a year, was feeding credit card numbers to the black market. All of their "official investigations" turned up nothing, but people were victimized on Virtual numbers that were only used at Rakuten. Likewise, people who rarely used their cards found only one common denominator - they used their cards with Rakuten, and a few weeks later, saw a small fraudulent charge, followed by VERY large fraudulent charges.
Another twist was that V.me transactions, once thought to be as safe as PayPal, were leading to fraud - it turns out, Visa would send the CC# and info when a vendor requested it (which, of course, Rakuten did, for whatever reasons).
Strangely, the biggest credit card fraud story ever, perpetrated by the company itself or some very highly placed insiders, has never even been a blip on the news radar, while Target's infamous 2 month incident seems to still have legs today.
There's even an
entire website devoted to covering Rakuten's Credit Card Fraud.