> JapanHacked_
[Resolved][Severity: Major][Web app exploit]

Kogensha: SQL injection on its website may have leaked members' names, addresses and contact details

The publisher's website was hit by SQL injection, and members' names, addresses, phone numbers and email addresses may have leaked.

Disclosed

2020-04-16

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

A log review found that the website had been hit by SQL injection. A forensic investigation by a specialist found no leak of card data. [1] [2]

Impact

Email addresses, names, addresses and phone or fax numbers of all members, and for family members the membership numbers and names of a related organization, may have leaked. The number of people was not given. [1] [2]

Response

The company consulted the police and had a web application firewall in place by . [1]

Timeline

  1. Disclosed 2020-04-16
  2. 1 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Name][Postal address][Phone number][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]WebサイトにSQLインジェクション攻撃、会員情報が流出（光言社）ScanNetSecurity · 2020-04-20 08:00
  2. [2][News]不正アクセスで個人情報流出の可能性 - 統一教会関連出版社Security NEXT · 2020-04-20