[Resolved][Severity: Critical][Web app exploit]

Kodama: its ham and food online shop was accessed without authorization, possibly leaking credit card data of 10,219 people over about thirteen months

A vulnerability was exploited, possibly leaking card data used for payments from June 2019 to July 2020.

Disclosed

2021-03-18

Organizations involved

Leaked or at risk

10.2K

10,219

Downtime

Unknown

What happened

2019-06-24
From this day, card data may have leaked through unauthorized access exploiting a vulnerability. [1]
2020-07-27
The card payment processor pointed out the problem. [1]
2020-07-28
The company stopped the online shop and began an investigation. [1]
2020-09-24
The investigation ended. [1]
2021-01-06
The company notified the police. [1]
2021-01-19
The company reported to the Personal Information Protection Commission. [1]
2021-03-18
The company explained and apologized to the customers concerned by email and letter. [1]

Impact

The name, number, expiry date and security code of 10,219 people who paid by card between June 24, 2019 and July 28, 2020 may have leaked and been misused. [1]