[Resolved][Severity: Critical][Web app exploit]

Kenko: the payment application of its ostomy supplies shop Kenko Online Shopping was tampered with, possibly leaking 152 card records

Card data used for payments from September 2019 to October 2020 may have leaked, and some may have been misused.

Disclosed

2021-03-29

Organizations involved

Leaked or at risk

152

Downtime

Unknown

What happened

2019-09-14
From this day, card data may have leaked through the tampered payment application. [1] [2]
2020-10-23
A card company pointed out the problem and the shop stopped card payments the same day. [1] [2]
2020-11-11
The company filed a report with the police. [1] [2]
2020-12-25
The outside investigator finished its work. [1] [2]
2021-03-10
The company reported to the Personal Information Protection Commission. [1] [2]
2021-03-29
The company announced the case and informed the customers concerned by letter. [1] [2]

Impact

The name, number, expiry date and security code of 152 customers who paid by card between September 14, 2019 and October 23, 2020 may have leaked. [1] [2]