[Resolved][Severity: Critical][Web app exploit]

Hypersoft: the payment page of its Salon de Net Supply Mall shop for salons was tampered with, and card data of 12 customers may have leaked

The payment code of the shop for salons was altered between February and April, and card details of 12 customers may have leaked. The shop was closed.

Disclosed

2020-09-25

Organizations involved

Leaked or at risk

Downtime

Unknown

What happened

2020-02-04
From this day to April 22, card data used for payments could leak. [1]
2020-04-20
A customer asked about the site's behavior, and checks found the payment code had been altered. [1]
2020-04-22
The tampering was fixed and card payments were stopped. [1]
2020-06-05
The outside investigation was completed. [1]
2020-09-25
Letters to affected customers began. [1]

Impact

Card holder names, numbers, expiry dates and security codes of 12 customers may have leaked. No misuse had been found. The shop was closed, to be relaunched as a different service. [1]