> JapanHacked_
[Resolved][Severity: Major][Credential abuse]

Dinos Cecile: a list attack on the Cecile online shop made 33 login attempts, and one succeeded

A domestic IP address made 33 login attempts with a credential list, and one succeeded. The name, birth date and mail address may have been viewed.

Disclosed

2020-11-06

Organizations involved

1

Leaked or at risk

1

1

Downtime

Unknown

What happened

  1. Suspicious login attempts were found. The same domestic IP address had tried 33 times with a list and one login succeeded. Access from that IP address was blocked. [1]

  2. The company disclosed the case. [1]

Impact

For the one account that was logged into, the name, birth date, gender, mail address and points balance may have been viewed. [1]

Timeline

  1. Started, Detected 2020-11-04
  2. Disclosed 2020-11-06
  3. 2 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak]
Entry point
Stolen credentials

Data exposed or at risk

[Name][Date of birth][Gender][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]セシール通販サイトに33件のPWリスト攻撃 - アカウント1件がログイン許すSecurity NEXT · 2020-11-09