> JapanHacked_
[Resolved][Severity: Critical][Intrusion]

Yukiyama: its ski slope tracking app yukiyama was accessed without authorization, and the images and run logs of all users were deleted and could not be recovered

Image and run log files of all users from before March 25 were deleted from an external storage server. No personal information leaked.

Disclosed

2021-03-26

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The app stopped working normally, and the company found that outsiders had accessed it without authorization and deleted files on an external storage server. It announced the case. The service came back that evening. [1] [2]

  2. The company announced that the app had been restored. [1]

Impact

Everything lost was the posted images and icon images of all users from before March 25, 2021, and all past run logs (CSV files recording the latitude, longitude and elevation of runs). The company tried to recover them but could not. [1] [2]

No unauthorized access to the servers that manage personal information and user data was confirmed, so no personal information leaked, and the check-in history of distance, speed and elevation can still be seen. The company said it would check the whole system, review its security measures, strengthen authentication, have a third party check them and back up all information regularly. The cause was not disclosed, and the company declined interviews. [1] [2]

Timeline

  1. Detected, Disclosed 2021-03-26
  2. 1 days

Attack or cause

Method
[Intrusion]
Impact
[Service outage]
Entry point
Unknown

Data exposed or at risk

–

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]「yukiyama」アプリに不正アクセス、画像データが全削除被害にScanNetSecurity · 2021-04-01 08:00
  2. [2][News]スキー場の滑走記録アプリに不正アクセス - ログや画像が消失Security NEXT · 2021-04-06