[Investigating][Severity: Critical][Web app exploit]

F.E.N.: its fashion information site fenlink.net was accessed by exploiting a vulnerability, and members' names, addresses, emails and, for older members, passwords are likely to have leaked

An attack on a vulnerability likely leaked members' names, addresses, emails and more. The Metropolitan Police Department contacted the company.

Disclosed

2021-06-30

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2021-06-21
The contractor that manages the site investigated and found traces of the member data being accessed without authorization on this day. [1] [2]
2021-06-24
The Metropolitan Police Department contacted the company about a possible leak and provided part of the data thought to have leaked. [1] [2]
2021-06-25
It reported to the Personal Information Protection Commission. [2]
2021-06-28
It reported the damage to the police. [2]

Information that may have leaked

Names, addresses, emails and genders of all registered members. For members who registered on or before February 8, 2015, it also covers phone numbers, birth dates, occupations and preferences in magazines and clothing, and the nicknames and passwords of a bulletin board run until that date. The number of people concerned was not disclosed. The site data was deleted and the service was stopped. [1] [2]