[Resolved][Severity: Major][Credential abuse]

Asobimo: credential stuffing against Toram Online led to logins to Asobimo accounts

Credential stuffing with IDs and passwords probably leaked elsewhere hit the online game Toram Online, and some Asobimo accounts were logged into by others.

Disclosed

2020-03-25

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

While monitoring access to accounts, the company found from 2020-03-25 login attempts with IDs and passwords that had probably leaked from other services. [1]

Impact

Players whose accounts were entered lost items, characters and the like. The number was not given. [1]

Response

Support contacted the players concerned and said it would restore lost items and characters where possible. The company urged players not to reuse passwords from other services. [1]