Kamada Shoyu: break-in at its business sales site leaked 5,787 customer records, including login passwords
The business sales site of soy sauce maker Kamada Shoyu in Kagawa was broken into from abroad, and 5,787 customer records, including login passwords, leaked.
Disclosed
2020-03-07
Organizations involved
1
Leaked or at risk
5.8K
5,787
Downtime
Unknown
What happened
The company noticed outside access from abroad to its business sales site, blocked access from abroad the same day and began analyzing the logs. A suspicious order was what gave it away. [1]
The company published what had happened and warned customers. [1]
The investigation was completed and found that personal data had leaked. [1] [2]
The results were disclosed. [1]
Impact
Timeline
- Detected 2020-01-28
- Disclosed 2020-03-07
- 39 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Kagawa, SakaideManufacturing5,787 leaked
Kamada Shoyu Inc.
Sources
- [1][News]倒産した取引先から発注、不正アクセス発見のきっかけとなった不審な注文(鎌田醤油)ScanNetSecurity · 2020-03-12 08:15
- [2][News]販売サイトに不正アクセス、顧客情報が流出 - 鎌田醤油Security NEXT · 2020-03-12