Jupiter Shop Channel: credential stuffing on the Shop Channel site got into 264 accounts
Logins from abroad with credentials obtained elsewhere got into 264 accounts on the TV shopping site. In 22, names, addresses and last four card digits may have been viewed.
Disclosed
2020-07-22
Organizations involved
1
Leaked or at risk
264
264
Downtime
Unknown
What happened
Impact
264 accounts were logged into. In 22 of them, names, addresses, phone numbers, birth dates, email addresses, the last four digits and expiry dates of cards, and delivery details may have been viewed. [1]
Timeline
- Detected 2020-07-15
- Disclosed 2020-07-22
- 7 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Data leak]
- Entry point
- Stolen credentials
Data exposed or at risk
Services hit
Organizations involved
[Breached][Major]Tokyo, KotoWholesale and retail trade264 leaked
Jupiter Shop Channel Co., Ltd.
Sources
- [1][News]通販サイト「ショップチャンネル」にPWリスト攻撃Security NEXT · 2020-07-28