> JapanHacked_
[Resolved][Severity: Critical][Intrusion]

Kamada Shoyu: break-in at its business sales site leaked 5,787 customer records, including login passwords

The business sales site of soy sauce maker Kamada Shoyu in Kagawa was broken into from abroad, and 5,787 customer records, including login passwords, leaked.

Disclosed

2020-03-07

Organizations involved

1

Leaked or at risk

5.8K

5,787

Downtime

Unknown

What happened

  1. The company noticed outside access from abroad to its business sales site, blocked access from abroad the same day and began analyzing the logs. A suspicious order was what gave it away. [1]

  2. The customer login page was closed. [1] [2]

  3. The company published what had happened and warned customers. [1]

  4. The investigation was completed and found that personal data had leaked. [1] [2]

  5. The results were disclosed. [1]

Impact

{n:5787} customer records leaked, with names, addresses, phone numbers, email addresses, user IDs, fax numbers and login passwords. [2]

The consumer online shop runs on a separate system and was not affected, the company said. [1] [2]

Timeline

  1. Detected 2020-01-28
  2. Disclosed 2020-03-07
  3. 39 days

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]倒産した取引先から発注、不正アクセス発見のきっかけとなった不審な注文(鎌田醤油)ScanNetSecurity · 2020-03-12 08:15
  2. [2][News]販売サイトに不正アクセス、顧客情報が流出 - 鎌田醤油Security NEXT · 2020-03-12