> JapanHacked_
[Resolved][Severity: Moderate][Intrusion]

actindi: an intruder got into a test server of the family outing site iko-yo and may have seen some data

An intrusion into a test server for the iko-yo outing site was detected on August 17. Some data may have been seen, but it held no member registration or card data.

Disclosed

2020-08-18

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. An intrusion into the test server was detected, and the same day it was found that some data may have been seen. The test database was deleted. [1]

  2. Public disclosure; people who may have been affected were to be contacted. [1]

Impact

The company said the data that may have been seen did not include registered members' personal data, card data or anything else open to misuse. [1]

Timeline

  1. Started, Detected 2020-08-17
  2. Disclosed 2020-08-18
  3. 1 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

–

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]おでかけ情報サイト「いこーよ」の検証環境サーバに不正アクセス、一部情報閲覧の可能性（アクトインディ）ScanNetSecurity · 2020-08-20 08:00