[Resolved][Severity: Major][Intrusion]

Jomo Shimbun: mail addresses and passwords of 5,415 members of the Jomodachi readers club leaked, and members got mail demanding money

An outside security firm spotted signs of a leak. Mail addresses and site passwords of members who joined from 2011 to 2018 leaked.

Disclosed

2020-10-29

Organizations involved

Leaked or at risk

5.4K

5,415

Downtime

Unknown

What happened

2020-10-28
An outside security firm that had found signs of a leak warned the paper of a possible breach, and it reported the case to Gunma police. Members had also complained about spam. [1] [2]
2020-10-29
The paper disclosed the case and suspended logins and new sign-ups. Members had been receiving suspicious mail demanding money. [1] [2] [4]
2020-11-30
The paper put the leak at 5,415 records. [3] [5]

Impact

Mail addresses and site passwords of members who registered from June 1, 2011 to July 7, 2018 leaked. The first notice had said names, addresses and birth dates might also be affected. [2] [5]

Members who used the same password elsewhere were asked to change it. [2]