[Resolved][Severity: Critical][Web app exploit]

Adachiya: a fake payment form on the Asakusa Adachiya pet goods shop may have leaked 57 customers' card data

Attackers exploited a flaw in the pet goods shop to plant a fake payment form. 57 card records from August 2019 to June 2020 may have leaked, and some may have been misused.

Disclosed

2020-09-04

Organizations involved

Leaked or at risk

Downtime

Unknown

What happened

2019-08-08
From this day to June 16, 2020, a fake payment form could steal card details. [1]
2020-05-14
A card company warned of a possible leak, and card payments were stopped the same day. [1]
2020-08-13
The outside investigation was completed. [1]
2020-09-04
Emails to affected customers began. [1]

Impact

Card holder names, numbers, expiry dates and security codes of 57 customers may have leaked, and some may have been misused. Customers who typed into the fake form without paying may also be affected. [1]