[Resolved][Severity: Critical][Web app exploit]

Niku no Mitakeya: an intrusion into its online shop may have leaked 530 payment cards

Attackers used a flaw in the shop's system, and card numbers and security codes used from November 2019 to January 2020 may have been stolen. Some may have been misused.

Disclosed

2020-06-17

Organizations involved

Leaked or at risk

530

Downtime

Unknown

What happened

2019-11-09
From this day, card data entered on the site could be stolen. [1] [2]
2020-01-22
A card company warned of a possible leak, and card payments were stopped the same day. [1] [2]
2020-03-09
An outside investigation finished and found that an intrusion through a flaw in part of the system was the cause. [1]
2020-04-22
The company consulted the police and reported to the Personal Information Protection Commission the next day. [1] [2]
2020-06-17
Public disclosure; affected customers began to be informed by email. [1] [2]

Impact

Card numbers, expiry dates, holder names and security codes of 530 cards used from November 9, 2019 to January 22, 2020 may have leaked, and some may have been misused. [1] [2]