> JapanHacked_
[Resolved][Severity: Moderate][Misdelivery]

Valuence Japan: an auction listing email carried the names of 1,872 customers who sold bags

A file sent to one trading partner to check auction listings still held the names of customers who had sold bags to Nanboya and other stores.

Disclosed

2020-05-07

Organizations involved

1

Leaked or at risk

1.9K

1,872

Downtime

Unknown

Impact

The file held the names of 1,872 customers who had sold bags to the company, the names of 12 businesses that had consigned bags, and the consigned items. The recipient alerted the company. [1] [2]

Cause

Staff built the file by hand from system data. The company said it would change the system so no manual step is needed. [2]

Timeline

  1. Disclosed 2020-05-07
  2. 1 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[Name]

Organizations involved

Open in organization search

Sources

  1. [1][Official]顧客情報の一部流出に関するお知らせとお詫びValuence · 2020-05-07
  2. [2][News]バッグを売却した顧客氏名など流出 - バリュエンスSecurity NEXT · 2020-05-11