Progate: its programming learning service suffered a password list attack, and 6 accounts were logged into without authorization
A password list attack logged into 6 accounts without authorization, exposing usernames, emails and other data.
Disclosed
2021-05-25
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Impact
Of about 2.1 million users, the usernames, emails, profile images and last four digits of card numbers could be viewed in the 6 accounts logged into without authorization. [1]
Timeline
- Detected 2021-05-24
- Disclosed 2021-05-25
- 1 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Data leak]
- Entry point
- Stolen credentials
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, ShibuyaInformation and communications6 leaked
Progate Inc.
Sources
- [1][News]オンラインプログラミング学習サービス「Progate」へパスワードリスト型攻撃、6件が成功ScanNetSecurity · 2021-06-08 08:00