[Resolved][Severity: Moderate][Credential abuse]

Shiseido Japan: an intruder got into the official Clé de Peau Beauté Instagram account, which was closed for a while

Unauthorized access to the brand's official Instagram account was found on July 31. The account was closed until the problem was solved; no leak of follower data was confirmed.

Disclosed

2020-08-05

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2020-07-31
Unauthorized access by a third party to the official Instagram account was found. [1]
2020-08-05
Public disclosure. The company was working with Facebook and closed the account until the problem was solved. [1]

Impact

No leak of followers' personal data was confirmed. Followers were asked not to open links in suspicious messages or comments from the account. [1]

Timeline

Started, Detected 2020-07-31
Disclosed 2020-08-05
5 days

Attack or cause

Method: [Credential abuse]
Impact
Entry point: Unknown

Data exposed or at risk

–

Organizations involved

[Breached][Moderate]Tokyo, ChuoWholesale and retail trade
Shiseido Japan Co., Ltd.

						Note
Shiseido Japan Co., Ltd.	[Breached]	[Moderate]	Tokyo, Chuo	Wholesale and retail trade	Unknown

Open in organization search

Sources

[1][News]クレ・ド・ポーボーテ公式Instagramアカウントに不正アクセス、解決まで一時閉鎖（資生堂ジャパン）ScanNetSecurity · 2020-08-12 08:00