> JapanHacked_
[Resolved][Severity: Moderate][Credential abuse]

NetMile: unauthorized access to the point exchange made it stop instant exchanges into e-money and similar rewards

A third party got into the point exchange. Instant exchanges to WAON, Docomo Koza and Kyash were suspended, and members who reused passwords were asked to change them.

Disclosed

2020-08-11

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The company said it had found unauthorized access to its NetMile point exchange and would email the affected members. [1]

Response

To stop fraudulent exchanges, instant exchanges into WAON points, Docomo Koza and Kyash were suspended with no date to resume. Members using the same ID and password as on other services were urged to change them right away. [1]

Timeline

  1. Detected, Disclosed 2020-08-11
  2. 1 days

Attack or cause

Method
[Credential abuse]
Impact
[Service outage]
Entry point
Unknown

Data exposed or at risk

–

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]ポイント交換所「ネットマイル」に不正アクセス、即時交換可能な特典への交換を一時停止（ネットマイル）ScanNetSecurity · 2020-08-13 08:00