LINE: a password list attack on LINE Login confirmed that about 74,000 IDs and passwords were valid
From July to September, attackers ran a password list against the email login of LINE Login, the sign-in that outside apps use, and confirmed 73,978 IDs and passwords as valid.
Disclosed
2020-09-17
Organizations involved
1
Leaked or at risk
74K
73,978
Downtime
Unknown
What happened
From July to September, the email and password sign-in of LINE Login, an authentication service open to outside developers, was tried with a list that had likely been obtained elsewhere. The IDs and passwords of 73,978 accounts were confirmed as valid. [1]
LINE said it had found no case where the attackers then got into a linked service, and warned users. [1]
Timeline
- Disclosed 2020-09-17
- 1 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Data leak]
- Entry point
- Stolen credentials
Data exposed or at risk
Services hit
Organizations involved
[Breached][Major]Tokyo, MinatoInformation and communications73,978 leaked
A Holdings Corporation
Sources
- [1][News]LINE利用者のパスワード約7.4万件が特定 - ログイン連携サービスにPWリスト攻撃Security NEXT · 2020-09-17