Kasetsusha: the Kasetusya ONLINE SHOP was tampered with, and 1,128 card records may have leaked

The shop for educational books and toys was altered, and card details entered at checkout from September 2019 to July 2020 may have been stolen.

Disclosed

2020-10-15

Organizations involved

Leaked or at risk

1.1K

1,128

Downtime

Unknown

What happened

2019-09-03
From this day to July 10, 2020, card details entered on the altered site could be sent out. [1]
2020-07-10
The payment processor warned of a possible leak, and card payments were stopped. [1]
2020-09-09
The outside investigation was completed. [1]
2020-09-11
The company reported the case to the police. [1]
2020-09-18
It reported to METI and the Personal Information Protection Commission. [1]
2020-10-15
Emails to affected customers began, asking them to check for charges they did not recognize. [1]

1,128 records with cardholder name, card number, expiry date and security code may have leaked. [1]

Service	Role	Impact level	Note
Kasetusya ONLINE SHOP	[Breached]	[Critical]

[Breached][Critical]Tokyo, NakanoInformation and communications1,128 leaked
Kasetsusha Co., Ltd.

						Note
Kasetsusha Co., Ltd.	[Breached]	[Critical]	Tokyo, Nakano	Information and communications	1,128