> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

LesPros Entertainment: its official online shop was broken into, and card data of 4,722 customers may have leaked

Card data entered at checkout from February to August 2020 on the talent agency's goods shop may have been stolen.

Disclosed

2020-11-11

Organizations involved

1

Leaked or at risk

4.7K

4,722

Downtime

Unknown

What happened

  1. From this day to August 12, card data entered on the site could be sent out. [1]

  2. A card company warned of a possible leak. [1]

  3. The outside investigation ended. [1]

  4. The company reported to the police and the Personal Information Protection Commission. [1]

  5. It began notifying affected customers by mail. [1]

Impact

Card data of 4,722 customers who paid on the LesPros official online shop between February 13 and August 12, 2020 may have leaked. [1]

Timeline

  1. Started 2020-02-13
  2. Detected 2020-08-12
  3. Disclosed 2020-11-11
  4. 272 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]芸能事務所のグッズ通販サイトに不正アクセス - クレカ情報4722人分が流出かSecurity NEXT · 2020-11-12