neten: its spiritual goods online shop Logostron.com was accessed without authorization and its payment application was altered, so card data of 2,441 customers may have leaked
The payment application was altered, card data of 2,441 customers from about a year may have leaked, and the site was closed.
Disclosed
2021-06-22
Organizations involved
1
Leaked or at risk
2.4K
2,441
Downtime
Unknown
What happened
From this day, a vulnerability in the site's system was exploited and the payment application was altered, so card data began to leak. [1]
A credit card company told the company of a concern about a leak, and it stopped card payments the same day and started an investigation by a third-party firm. [1]
The investigation finished. [1]
It reported the damage to the police. [1]
It reported to the Personal Information Protection Commission. [1]
It announced the case. [1]
Impact
The names, numbers, expiry dates and security codes of 2,441 customers who paid by card between December 16, 2019 and December 7, 2020 may have leaked. The site was closed entirely to prevent a recurrence. [1]
Timeline
- Started 2019-12-16
- Detected 2020-12-07
- Disclosed 2021-06-22
- 554 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Yamanashi, KofuManufacturing2,441 leaked
neten Inc.
Sources
- [1][News]スピリチュアルグッズ販売「ロゴストロンコム」に不正アクセス、2,441名のカード情報が流出ScanNetSecurity · 2021-07-12 08:00