Hakata Marukita Suisan: its closed former online shop turned out to have been hacked, and card data of 3,272 customers may have leaked
A flaw in the online shop it ran until September 2019 was exploited. Card data from January 2018 to September 2019 may have leaked, and some may have been misused.
Disclosed
2020-09-14
Organizations involved
1
Leaked or at risk
3.3K
3,272
Downtime
Unknown
What happened
From this day to September 30, 2019, card data of customers on the site could leak. [1]
Sales moved to a large online mall, and all data on the old site's server was deleted. [1]
A card company reported a possible leak. An outside firm examined the program files the company had kept. [1]
The investigation ended, finding that a flaw had likely been exploited to steal the data. [1]
The Personal Information Protection Commission and the police were notified. [1]
Public disclosure. [1]
Impact
Card numbers, expiry dates and security codes of 3,272 customers who paid by card on the old site may have leaked, and some may have been misused. [1]
Timeline
- Started 2018-01-23
- Detected 2020-02-17
- Disclosed 2020-09-14
- 965 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Fukuoka, Fukuoka, NishiManufacturing3,272 leaked
Hakata Marukita Suisan Co., Ltd.
Sources
- [1][News]データ削除済みの旧通販サイトに対する不正アクセスが判明 - ニッスイ関連会社Security NEXT · 2020-09-15