> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Mainichi Genki: its health food online shop was accessed without authorization, and card data of 283 customers may have leaked and been misused

Card data of 283 customers from about 15 months may have leaked through unauthorized access, and the site was closed.

Disclosed

2021-07-21

Organizations involved

1

Leaked or at risk

283

283

Downtime

Unknown

What happened

  1. From this day, the site was accessed without authorization and card data began to leak. [1]

  2. A credit card company told the company of a concern about a leak. Card data up to this day is covered. [1]

  3. The investigation finished. [1]

  4. It reported to the Personal Information Protection Commission and the police. [1]

  5. It announced the case. [1]

Impact

The names, numbers, expiry dates and security codes of 283 customers who paid by card between June 28, 2019 and October 9, 2020 may have leaked and been misused. The site was closed. [1]

Timeline

  1. Started 2019-06-28
  2. Detected 2020-10-09
  3. Disclosed 2021-07-21
  4. 754 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]健康食品販売ECサイトに不正アクセス、約1年3ヶ月間 決済情報流出に気付けずScanNetSecurity · 2021-07-26 08:00