> JapanHacked_
[Resolved][Severity: Critical][Intrusion]

Hobbys Factory: 63,587 member IDs, passwords and email addresses leaked from Card Shop BIGWEB

IDs, passwords and email addresses of 63,587 members of the Card Shop BIGWEB trading card store had leaked, probably around 2012.

Disclosed

2020-02-27

Organizations involved

1

Leaked or at risk

63.6K

63,587

Downtime

Unknown

What happened

On an outside intelligence firm told the company its member data had leaked. A comparison matched members registered before April 2012. The cause was not confirmed, but the company believes a server it used until September 2017 was broken into. [1]

Impact

{n:63587} IDs, passwords and email addresses leaked; the passwords were stored in plain text. The leak probably happened around April 2012. Logins with them could also have exposed names, addresses and phone numbers. Card data was not stored. [1] [2] [3]

Response

The company emailed those affected, reset their passwords, and checked and hardened its current servers. [1]

Timeline

  1. Detected 2020-02-14
  2. Disclosed 2020-02-27
  3. 13 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Passwords][E-mail address]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]個人情報漏洩に関するお詫びとご報告Hobbys Factory · 2020-02-27
  2. [2][News]カードゲーム通販サイトで約6万件の個人情報漏えい 8年間気付かずITmedia NEWS · 2020-02-28 12:57
  3. [3][News]カードショップBIG-WEB、平文パスワード含む会員情報流出(ホビーズファクトリー)ScanNetSecurity · 2020-03-02 08:00