Dirt Freak: intrusion into the Dirt Bike Plus online store puts card data at risk
The Dirt Bike Plus online store for motorcycle gear was breached and data of up to 3,103 cards may have leaked.
Disclosed
2020-01-15
Organizations involved
1
Leaked or at risk
3.1K
3,103
Downtime
Unknown
What happened
Card companies warned of a possible leak; the company investigated and shut the site. [1]
The company consulted the police, and reported to the PPC on 28 October. [1]
Public disclosure. [1]
Impact
Card data of up to {n:3103} cards used from 27 December 2018 to 3 July 2019 (name, number, expiry, security code) may have leaked. [1]
Cause
Unauthorized access through a flaw in the system. [1]
Timeline
- Disclosed 2020-01-15
- 1 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Aichi, SetoWholesale and retail trade3,103 leaked
Dirt Freak Inc.
Sources
- [1][News]バイク用品通販サイトに不正アクセス - クレカ情報流出の可能性Security NEXT · 2020-01-16