[Resolved][Severity: Major][Intrusion]

Ryuki Design: intruders reached the database server of ECTOOL, a tool for online shops, and altered some data

Someone got into the shared database of ECTOOL, a tool for shops on Rakuten Ichiba and Yahoo! Shopping, and altered part of it; it held orderers' names and addresses.

Disclosed

2020-03-27

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2020-02-28
Around 9:15 a.m. the company noticed that mail from the ECTOOL mail server was not arriving. Its check found unauthorized access to the database server shared by five features, and part of the data had been altered. It reported to the Personal Information Protection Commission the same day. [1]
2020-02-29
The services using this database were stopped and the data was deleted from the server. The police were consulted. [1]
2020-03-27
Public disclosure. [1]

Impact

The server held order mail data (order numbers, names and addresses of orderers and recipients, items and amounts) from 2015-08-30 to 2020-02-27 for some shops using the five features. Most addresses were only a postal code and prefecture. An outside investigator found no sign that the order data was viewed or sent out. Credit card data and email addresses were not included. [1]