> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

neten: its spiritual goods online shop Logostron.com was accessed without authorization and its payment application was altered, so card data of 2,441 customers may have leaked

The payment application was altered, card data of 2,441 customers from about a year may have leaked, and the site was closed.

Disclosed

2021-06-22

Organizations involved

1

Leaked or at risk

2.4K

2,441

Downtime

Unknown

What happened

  1. From this day, a vulnerability in the site's system was exploited and the payment application was altered, so card data began to leak. [1]

  2. A credit card company told the company of a concern about a leak, and it stopped card payments the same day and started an investigation by a third-party firm. [1]

  3. The investigation finished. [1]

  4. It reported the damage to the police. [1]

  5. It reported to the Personal Information Protection Commission. [1]

  6. It announced the case. [1]

Impact

The names, numbers, expiry dates and security codes of 2,441 customers who paid by card between December 16, 2019 and December 7, 2020 may have leaked. The site was closed entirely to prevent a recurrence. [1]

Timeline

  1. Started 2019-12-16
  2. Detected 2020-12-07
  3. Disclosed 2021-06-22
  4. 554 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]スピリチュアルグッズ販売「ロゴストロンコム」に不正アクセス、2,441名のカード情報が流出ScanNetSecurity · 2021-07-12 08:00