> JapanHacked_
[Resolved][Severity: Moderate][Web app exploit]

Kansai TV Hads: its shopping site Kantele Shopping was attacked through a vulnerability, and names and email addresses of 19,297 customers may have been viewed

Names and email addresses of customers may have been viewed through an attack on a vulnerability; no sign of data extraction was found.

Disclosed

2021-03-01

Organizations involved

1

Leaked or at risk

19.3K

19,297

Downtime

Unknown

What happened

  1. From this day until February 9, a large volume of email kept arriving at the inquiry desk, more than 100,000 in February alone. [1]

  2. The company disclosed that its investigation had found unauthorized access. It blocked traffic from the source and fixed the programs and system. [1]

Impact

Names and email addresses of 19,297 customers may have been viewed from outside. The logs showed no trace of commands to extract data or of other personal data being taken. [1]

The link between the mass email and the access is unknown. The company contacted the customers concerned individually. [1]

Timeline

  1. Disclosed 2021-03-01
  2. 1 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Name][E-mail address]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]テレビ通販サイトに不正アクセス - 関西テレビ関連会社Security NEXT · 2021-03-01