Five Gate: logins by others on the Point Income rewards site, with points exchanged by third parties
On the Point Income rewards site, third parties got into accounts registered with internet provider email addresses, reissued passwords and exchanged points.
Disclosed
2020-03-04
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
From , third parties reissued passwords and exchanged points on the accounts of members who had registered email addresses from providers such as jcom and ocn. [1]
Impact
No leak of personal data from the site was found. The company said user information may have leaked from an outside service. [1]
Response
The company asked members to change their registered email address and password. [1]
Timeline
- Started 2020-02-27
- Disclosed 2020-03-04
- 6 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Fraud]
- Entry point
- Stolen credentials
Data exposed or at risk
–
Services hit
Organizations involved
[Breached][Major]Tokyo, ShibuyaInformation and communications
Five Gate Inc.
Sources
- [1][News]「ポイントインカム」に不正ログイン、第三者のポイント交換確認（ファイブゲート）ScanNetSecurity · 2020-03-09 08:00