Candil Design: its repair materials online shop Pro Shop Takumi was accessed without authorization, and card data of 3,357 customers may have leaked
Card data of 3,357 customers from about two and a half years may have leaked through unauthorized access.
Disclosed
2021-07-20
Organizations involved
1
Leaked or at risk
3.4K
3,357
Downtime
Unknown
What happened
From this day, the site was accessed without authorization and card data began to leak. [1]
A credit card company told the company of a concern about a leak. Card data up to this day is covered. [1]
The investigation finished. [1]
It reported to the police. [1]
It reported to the Personal Information Protection Commission. [1]
It announced the case as a subsidiary of Candil, a company listed on the first section of the Tokyo Stock Exchange. [1]
Impact
The names, numbers, expiry dates and security codes of 3,357 customers who paid by card between July 3, 2018 and January 26, 2021 may have leaked. [1]
Timeline
- Started 2018-07-03
- Detected 2021-01-26
- Disclosed 2021-07-20
- 1113 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, ShinjukuWholesale and retail trade3,357 leaked
Candil Design Co., Ltd.
Sources
- [1][News]補修材専門店「ECサイトプロショップ匠」に不正アクセス、約2年半分の決済情報流出ScanNetSecurity · 2021-07-21 08:00