> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Reform Sangyo Shimbun: the Reform Books site was broken into, and 1,944 card records may have leaked

Card data entered at checkout from July 2019 to July 2020 may have been stolen.

Disclosed

2020-11-18

Organizations involved

1

Leaked or at risk

1.9K

1,944

Downtime

Unknown

What happened

  1. From this day to July 8, 2020, card data entered on the site could be sent out. [1]

  2. A card company raised the problem, and payments were stopped the same day. [1]

  3. The outside investigation ended. [1]

  4. The company consulted the police. [1]

  5. It reported to the Personal Information Protection Commission. [1]

  6. It began notifying affected customers by mail. [1]

Impact

Card data from 1,944 payments between July 22, 2019 and July 8, 2020 may have leaked. [1]

Timeline

  1. Started 2019-07-22
  2. Detected 2020-07-08
  3. Disclosed 2020-11-18
  4. 485 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]建築関係者向け書籍サイトに不正アクセス - クレカ情報流出の可能性Security NEXT · 2020-11-24