> JapanHacked_
[Contained][Severity: Critical][Intrusion]

Mammy Pro: an intruder hit the Mama Navi parenting site, and a message from someone claiming the attack revealed a member data leak

On August 30 someone claiming to be the attacker told the site's contact desk they had hacked it. An investigation found traces of a member data leak, and the site was shut down.

Disclosed

2020-09-01

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Mail to the contact desk from someone who appeared to be the attacker said they had hacked Mama Navi. An outside investigator found traces of a member data leak. [1] [2]

  2. Public disclosure. The admin password was changed, the site was shut down, and the police and others were consulted. [1] [2]

Impact and response

Personal data that members registered may have leaked; no count was given. Members at risk were to be informed by letter. The company fixed the weak point but planned to reopen only on a new, safer system. [1]

Timeline

  1. Detected 2020-08-30
  2. Disclosed 2020-09-01
  3. 2 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak][Service outage]
Entry point
Unknown

Data exposed or at risk

–

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]不正アクセス当事者と思われる人物から「ママナビ」にハッキングした旨を通告(MammyPro)ScanNetSecurity · 2020-09-03 08:00
  2. [2][News]犯人を名乗る人物から「ハッキングした」と報告 ママ向け情報サイトで個人情報漏えいのおそれITmedia NEWS · 2020-09-02 17:54