> JapanHacked_
[Resolved][Severity: Major][Credential abuse]

Progate: its programming learning service suffered a password list attack, and 6 accounts were logged into without authorization

A password list attack logged into 6 accounts without authorization, exposing usernames, emails and other data.

Disclosed

2021-05-25

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. From this time until 06:30, login attempts in a password list attack logged into 6 accounts without authorization. [1]

  2. It announced the case. [1]

Impact

Of about 2.1 million users, the usernames, emails, profile images and last four digits of card numbers could be viewed in the 6 accounts logged into without authorization. [1]

Timeline

  1. Detected 2021-05-24
  2. Disclosed 2021-05-25
  3. 1 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak]
Entry point
Stolen credentials

Data exposed or at risk

[E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]オンラインプログラミング学習サービス「Progate」へパスワードリスト型攻撃、6件が成功ScanNetSecurity · 2021-06-08 08:00