> JapanHacked_
[Resolved][Severity: Critical][Intrusion]

Hasegawa Saketen: its online store was accessed without authorization, possibly leaking credit card data of 2,865 people

Card data of customers who paid between December 2020 and January 2021 may have been stolen and misused.

Disclosed

2021-03-24

Organizations involved

1

Leaked or at risk

2.9K

2,865

Downtime

Unknown

What happened

  1. From this day, card data may have been stolen through unauthorized access. [1]

  2. A card company pointed out the problem. [1]

  3. The outside investigation ended. [1]

  4. The company reported to the police. [1]

  5. The company reported to the Personal Information Protection Commission. [1]

Impact

The name, number, expiry date, security code and other details of 2,865 people who paid by card between December 18, 2020 and January 20, 2021 may have been stolen and misused. The company emailed the customers concerned. [1]

Timeline

  1. Started 2020-12-18
  2. Detected 2021-01-14
  3. Disclosed 2021-03-24
  4. 96 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Payment card][Name]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]酒店オンラインショップに不正アクセス - クレカ情報流出の可能性Security NEXT · 2021-03-24