> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

EBI: the Tokyo noble* online shop for umbrellas was broken into, and card data of 549 customers leaked

Card data entered at checkout from June 2019 to June 2020 was stolen and may be misused.

Disclosed

2020-11-05

Organizations involved

1

Leaked or at risk

549

549

Downtime

Unknown

What happened

  1. From this day to June 17, 2020, card data entered on the site could be sent out. [1]

  2. A card company warned of a possible leak. [1]

  3. The outside investigation ended. [1]

  4. The company consulted the police. [1]

  5. It reported to the Personal Information Protection Commission. [1]

  6. It began notifying affected customers. [1]

Impact

Card data of 549 customers who paid between June 25, 2019 and June 17, 2020 leaked. [1]

Timeline

  1. Started 2019-06-25
  2. Detected 2020-07-03
  3. Disclosed 2020-11-05
  4. 499 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]傘専門ネットショップに不正アクセス - クレカ情報が流出Security NEXT · 2020-11-05