Reform Sangyo Shimbun: the Reform Books site was broken into, and 1,944 card records may have leaked
Card data entered at checkout from July 2019 to July 2020 may have been stolen.
Disclosed
2020-11-18
Organizations involved
1
Leaked or at risk
1.9K
1,944
Downtime
Unknown
What happened
From this day to July 8, 2020, card data entered on the site could be sent out. [1]
A card company raised the problem, and payments were stopped the same day. [1]
The outside investigation ended. [1]
The company consulted the police. [1]
It reported to the Personal Information Protection Commission. [1]
It began notifying affected customers by mail. [1]
Impact
Card data from 1,944 payments between July 22, 2019 and July 8, 2020 may have leaked. [1]
Timeline
- Started 2019-07-22
- Detected 2020-07-08
- Disclosed 2020-11-18
- 485 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Tokyo, ChuoInformation and communications1,944 leaked
Reform Sangyo Shimbun Co., Ltd.
Sources
- [1][News]建築関係者向け書籍サイトに不正アクセス - クレカ情報流出の可能性Security NEXT · 2020-11-24