> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Maple: four online shops, including acupuncture and medical supply sites, were broken into, and 1,147 card records may have leaked

On four sites run by the Osaka company, card data entered at checkout from August 2019 to June 2020 may have been stolen.

Disclosed

2020-11-10

Organizations involved

1

Leaked or at risk

1.1K

1,147

Downtime

Unknown

What happened

  1. From this day to June 26, 2020, card data entered on the sites could be sent out. [1]

  2. A card company warned of a possible leak. [1]

  3. The outside investigation ended. [1]

  4. The company consulted the police. [1]

  5. It reported to the Personal Information Protection Commission. [1]

  6. It began notifying affected customers. [1]

Impact

Site
Records
Maple Shop acupuncture site
775
Maple Shop medical supply site
299
Maple Shop nursing care site
14
National acupuncture and massage association online store
59
[1]

Timeline

  1. Started 2019-08-28
  2. Detected 2020-06-26
  3. Disclosed 2020-11-10
  4. 440 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]鍼灸や医療など複数運営通販サイトで情報流出 - メイプルSecurity NEXT · 2020-11-10