Biz Up Soken: its online shop Biz Up Soken Online Shop was accessed without authorization and its payment application was altered, so 200 cards of 194 customers may have leaked and been misused
The payment application was altered, and 200 cards of 194 customers may have leaked and been misused.
Disclosed
2021-06-24
Organizations involved
1
Leaked or at risk
200
200
Downtime
Unknown
What happened
From this day, a vulnerability of the system was exploited and the payment application was altered, so card data began to leak. [1] [2]
A credit card company pointed it out and the problem came to light. Card data up to this day is covered. [1] [2]
It reported the result of its investigation. [2]
It reported to the Personal Information Protection Commission. [2]
It reported to the police. [2]
Impact
Timeline
- Started 2020-01-25
- Detected 2020-12-11
- Disclosed 2021-06-24
- 516 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Tokyo, MinatoScientific research, professional and technical services200 leaked
Biz Up Soken Co., Ltd.
Sources
- [1][News]「ビズアップ総研オンラインショップ」に不正アクセス - クレカ情報が流出Security NEXT · 2021-06-24
- [2][News]e-ラーニング動画販売サイトへ不正アクセス、194名分のカード情報が流出ScanNetSecurity · 2021-06-28 08:00