> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Biz Up Soken: its online shop Biz Up Soken Online Shop was accessed without authorization and its payment application was altered, so 200 cards of 194 customers may have leaked and been misused

The payment application was altered, and 200 cards of 194 customers may have leaked and been misused.

Disclosed

2021-06-24

Organizations involved

1

Leaked or at risk

200

200

Downtime

Unknown

What happened

  1. From this day, a vulnerability of the system was exploited and the payment application was altered, so card data began to leak. [1] [2]

  2. A credit card company pointed it out and the problem came to light. Card data up to this day is covered. [1] [2]

  3. It reported the result of its investigation. [2]

  4. It reported to the Personal Information Protection Commission. [2]

  5. It reported to the police. [2]

  6. It began contacting the customers concerned. [1] [2]

Impact

200 credit cards of 194 customers entered between January 25, 2020 and December 11, 2020 may have leaked and been misused. [1] [2]

Timeline

  1. Started 2020-01-25
  2. Detected 2020-12-11
  3. Disclosed 2021-06-24
  4. 516 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]「ビズアップ総研オンラインショップ」に不正アクセス - クレカ情報が流出Security NEXT · 2021-06-24
  2. [2][News]e-ラーニング動画販売サイトへ不正アクセス、194名分のカード情報が流出ScanNetSecurity · 2021-06-28 08:00