> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Fiore: intrusion into the Sekai no Wine Budouya wine shop puts data of 658 cards at risk

The Sekai no Wine Budouya online wine shop was breached and card data of 658 customers may have leaked.

Disclosed

2020-02-25

Organizations involved

1

Leaked or at risk

658

658

Downtime

Unknown

What happened

  1. The company's own check raised concern about a leak; it stopped card payment and the site the same day. [1]

  2. An outside investigation was completed. [1]

  3. The company reported to the Tsurumi police, and to the PPC on 30 January. [1]

  4. Public disclosure, with emails and letters to those affected. [1]

Impact

Card data of {n:658} customers who paid from 20 October to 6 December 2019 (name, number, expiry, security code) may have leaked. [1]

Response

The company said it would rebuild the shop on a new system. [1]

Timeline

  1. Started 2019-10-20
  2. Detected 2019-12-06
  3. Disclosed 2020-02-25
  4. 128 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Name][Payment card]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]「世界のワイン葡萄屋」に不正アクセス、658名分のカード情報が流出(フィオーロ)ScanNetSecurity · 2020-02-27 08:00