[Resolved][Severity: Critical][Web app exploit]

Kaneshime Matsuda Suisan: the payment app of the Tarakoya Kojohama cod roe shop was tampered with, and 811 card records leaked

A fake card entry screen was shown, and card data entered from September 2018 to May 2020 was stolen. Misuse is possible.

Disclosed

2020-11-09

Organizations involved

Leaked or at risk

811

Downtime

Unknown

What happened

2018-09-15
From this day to May 14, 2020, the payment app was tampered with and card data entered could be stolen. [1]
2020-06-26
The outside investigation ended. [1]
2020-09-07
The company consulted the police. [1]
2020-09-08
It reported to the Personal Information Protection Commission. [1]
2020-11-09
It began notifying affected customers. [1]

Impact

A card company raised the problem in May. Card data from 811 payments made on Tarakoya Kojohama between September 15, 2018 and May 14, 2020 leaked and may be misused. [1]