> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Eight: intrusion into the Junoesque Bagel online shop puts card data at risk

The online shop of the Junoesque Bagel bakery was compromised and data of 520 payment cards may have leaked.

Disclosed

2020-01-09

Organizations involved

1

Leaked or at risk

520

520

Downtime

Unknown

What happened

  1. Card companies warned of a possible leak and card payment was stopped the same day. [1]

  2. An outside investigation was completed. [1]

  3. The company reported to the PPC, and to the Shibuya police on 7 November. [1]

  4. Public disclosure. [1]

Impact

Card data of {n:520} cards used from 31 October 2018 to 17 June 2019, with name, number, expiry and security code, may have leaked. [1]

Timeline

  1. Disclosed 2020-01-09
  2. 1 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Name][Payment card]

Organizations involved

Open in organization search

Sources

  1. [1][News]「ジュノエスクベーグル」に不正アクセス、カード情報流出の可能性（Eight）ScanNetSecurity · 2020-01-10 08:00