EBI: the Tokyo noble* online shop for umbrellas was broken into, and card data of 549 customers leaked
Card data entered at checkout from June 2019 to June 2020 was stolen and may be misused.
Disclosed
2020-11-05
Organizations involved
1
Leaked or at risk
549
549
Downtime
Unknown
What happened
From this day to June 17, 2020, card data entered on the site could be sent out. [1]
A card company warned of a possible leak. [1]
The outside investigation ended. [1]
The company consulted the police. [1]
It reported to the Personal Information Protection Commission. [1]
It began notifying affected customers. [1]
Impact
Card data of 549 customers who paid between June 25, 2019 and June 17, 2020 leaked. [1]
Timeline
- Started 2019-06-25
- Detected 2020-07-03
- Disclosed 2020-11-05
- 499 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Tokyo, SumidaWholesale and retail trade549 leaked
EBI Co., Ltd.
Sources
- [1][News]傘専門ネットショップに不正アクセス - クレカ情報が流出Security NEXT · 2020-11-05