Maple: four online shops, including acupuncture and medical supply sites, were broken into, and 1,147 card records may have leaked
On four sites run by the Osaka company, card data entered at checkout from August 2019 to June 2020 may have been stolen.
Disclosed
2020-11-10
Organizations involved
1
Leaked or at risk
1.1K
1,147
Downtime
Unknown
What happened
From this day to June 26, 2020, card data entered on the sites could be sent out. [1]
A card company warned of a possible leak. [1]
The outside investigation ended. [1]
The company consulted the police. [1]
It reported to the Personal Information Protection Commission. [1]
It began notifying affected customers. [1]
Impact
Timeline
- Started 2019-08-28
- Detected 2020-06-26
- Disclosed 2020-11-10
- 440 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Osaka, Osaka, YodogawaWholesale and retail trade1,147 leaked
Maple Co., Ltd.
Sources
- [1][News]鍼灸や医療など複数運営通販サイトで情報流出 - メイプルSecurity NEXT · 2020-11-10