> JapanHacked_
[Resolved][Severity: Major][Credential abuse]

Jupiter Golf Network: its Golf Network mail news delivery system was logged into without authorization, and about 40,000 email addresses leaked

The delivery system was logged into without authorization, about 40,000 email addresses were taken, and spam posing as a card company was sent.

Disclosed

2021-07-08

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The mail delivery system was logged into without authorization, and email addresses were downloaded at 13:59 and 14:59. Spam posing as a card company was sent at 13:28, 13:32 and 14:57. [1]

  2. It announced the case and paused the service. It reported to the Broadcasting Security Center. [1]

Impact

About 40,000 email addresses leaked. [1]

Timeline

  1. Started, Detected 2021-07-06
  2. Disclosed 2021-07-08
  3. 2 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak][Fraud]
Entry point
Stolen credentials

Data exposed or at risk

[E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]「ゴルフネットワークメールニュース」のメール配信システムに不正ログイン、メールアドレス4万件流出ScanNetSecurity · 2021-07-12 08:00