Hasegawa Saketen: its online store was accessed without authorization, possibly leaking credit card data of 2,865 people
Card data of customers who paid between December 2020 and January 2021 may have been stolen and misused.
Disclosed
2021-03-24
Organizations involved
1
Leaked or at risk
2.9K
2,865
Downtime
Unknown
What happened
From this day, card data may have been stolen through unauthorized access. [1]
A card company pointed out the problem. [1]
The outside investigation ended. [1]
The company reported to the police. [1]
The company reported to the Personal Information Protection Commission. [1]
Impact
The name, number, expiry date, security code and other details of 2,865 people who paid by card between December 18, 2020 and January 20, 2021 may have been stolen and misused. The company emailed the customers concerned. [1]
Timeline
- Started 2020-12-18
- Detected 2021-01-14
- Disclosed 2021-03-24
- 96 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Tokyo, MinatoWholesale and retail trade2,865 leaked
Hasegawa Saketen Co., Ltd.
Sources
- [1][News]酒店オンラインショップに不正アクセス - クレカ情報流出の可能性Security NEXT · 2021-03-24