[Resolved][Severity: Critical][Web app exploit]

Kunihiro: an intrusion into its oyster shop Kaki no Kunihiro may have leaked the cards of 491 customers

Attackers used a flaw in the oyster shop's system, and card numbers and security codes used over about a year from December 2018 may have been stolen. Some may have been misused.

Disclosed

2020-07-01

Organizations involved

Leaked or at risk

491

Downtime

Unknown

What happened

2018-12-22
From this day, card data entered on the site could be stolen. [1]
2019-12-06
A card company warned of a possible leak; card payments and the site were stopped and an outside investigation began. [1]
2020-01-30
The investigation finished and found that an intrusion through a flaw in the system was the cause. [1]
2020-02-20
The company reported the crime to the police and reported to the Personal Information Protection Commission on February 25. [1]
2020-07-01
Affected customers began to be informed by email and letter. The company said it had not decided when the site would reopen. [1]

Impact

Holder names, numbers, expiry dates and security codes of the cards of 491 customers who shopped from December 22, 2018 to December 6, 2019 may have leaked, and some may have been misused. [1]