Kansai TV Hads: its shopping site Kantele Shopping was attacked through a vulnerability, and names and email addresses of 19,297 customers may have been viewed
Names and email addresses of customers may have been viewed through an attack on a vulnerability; no sign of data extraction was found.
Disclosed
2021-03-01
Organizations involved
1
Leaked or at risk
19.3K
19,297
Downtime
Unknown
What happened
From this day until February 9, a large volume of email kept arriving at the inquiry desk, more than 100,000 in February alone. [1]
The company disclosed that its investigation had found unauthorized access. It blocked traffic from the source and fixed the programs and system. [1]
Impact
Names and email addresses of 19,297 customers may have been viewed from outside. The logs showed no trace of commands to extract data or of other personal data being taken. [1]
The link between the mass email and the access is unknown. The company contacted the customers concerned individually. [1]
Timeline
- Disclosed 2021-03-01
- 1 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Services hit
Organizations involved
[Breached][Moderate]Osaka, Osaka, KitaWholesale and retail trade19,297 leaked
Kansai Television Hads Co., Ltd.
Sources
- [1][News]テレビ通販サイトに不正アクセス - 関西テレビ関連会社Security NEXT · 2021-03-01