> JapanHacked_
[Resolved][Severity: Moderate][Intrusion]

Shizuoka Railway: the Shizutetsu train website was altered and could send visitors to a malicious site

From June 24 to 25 the train website was altered so visitors could be sent to a malicious site. The company closed the site and said no personal data leaked.

Disclosed

2020-06-29

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. From about this time, the Shizutetsu train website was altered so that visitors could be sent to a malicious site. [1] [2]

  2. The alteration was found and the site was closed. [1] [2]

  3. Public disclosure; part of the site was reopened. [1] [2]

Impact

People who opened the site during this time may have been sent to the malicious site. The company said no personal data leaked. [1] [2]

Timeline

  1. Started 2020-06-24
  2. Detected 2020-06-25
  3. Disclosed 2020-06-29
  4. 5 days

Attack or cause

Method
[Intrusion]
Impact
[Site defacement]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]【静鉄電車ホームページ】ホームページ改ざんに関するご報告とお詫びShizuoka Railway · 2020-06-29
  2. [2][News]静岡鉄道のサイトが一時改ざん - 不正サイト誘導のおそれSecurity NEXT · 2020-07-06