Tapioca Express: payment module of its Tapioca Express online shop altered, data of 623 cards at risk
The Tapioca Express online shop was altered through a flaw in its system, and card data of 623 customers may have leaked.
Disclosed
2020-03-04
Organizations involved
1
Leaked or at risk
623
623
Downtime
Unknown
What happened
Card payment on the old site stopped as the shop moved to a new site. [1]
Some card companies warned of a possible leak. [1]
An outside investigation found that a flaw had been used to alter the payment application. The company reported to the PPC the same day. [1]
The company reported the crime to the Kitazawa police. [1]
Public disclosure. [1]
Impact
Timeline
- Started 2019-09-17
- Detected 2019-10-31
- Disclosed 2020-03-04
- 169 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Tokyo, MinatoWholesale and retail trade623 leaked
Tapioca Express Inc.
Sources
- [1][News]セキュリティコードや決済トークンを含む623名分のクレカ情報流出の可能性(タピオカエキスプレス)ScanNetSecurity · 2020-03-06 08:00