Keidanren Jigyo Service: a rewritten site program may have leaked about 500 seminar and book orders
The site's program had been rewritten so that details entered by seminar and book applicants were saved to a file the attacker chose.
Disclosed
2020-05-28
Organizations involved
1
Leaked or at risk
500
500
Downtime
Unknown
What happened
Impact
Timeline
- Started 2020-01-21
- Detected 2020-05-21
- Disclosed 2020-05-28
- 128 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, ChiyodaOther services500 leaked
Keidanren Jigyo Service
Sources
- [1][News]経団連の関連団体、約500件の個人情報流出か Webサイトに不正アクセスITmedia NEWS · 2020-05-29 15:28
- [2][News]不正アクセスで個人情報流出か - 経団連事業サービスSecurity NEXT · 2020-05-29
- [3][News]プログラム改ざん、申し込み者情報は攻撃者指定のファイルへ書き込み(経団連事業サービス)ScanNetSecurity · 2020-06-01 08:00