User data on payment app exposed to public in Japan, Taiwan