Mainichi Genki: its health food online shop was accessed without authorization, and card data of 283 customers may have leaked and been misused
Card data of 283 customers from about 15 months may have leaked through unauthorized access, and the site was closed.
Disclosed
2021-07-21
Organizations involved
1
Leaked or at risk
283
283
Downtime
Unknown
What happened
From this day, the site was accessed without authorization and card data began to leak. [1]
A credit card company told the company of a concern about a leak. Card data up to this day is covered. [1]
The investigation finished. [1]
It reported to the Personal Information Protection Commission and the police. [1]
It announced the case. [1]
Impact
The names, numbers, expiry dates and security codes of 283 customers who paid by card between June 28, 2019 and October 9, 2020 may have leaked and been misused. The site was closed. [1]
Timeline
- Started 2019-06-28
- Detected 2020-10-09
- Disclosed 2021-07-21
- 754 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Kanagawa, Yokohama, Nishi-kuWholesale and retail trade283 leaked
Mainichi Genki Ltd.
Sources
- [1][News]健康食品販売ECサイトに不正アクセス、約1年3ヶ月間 決済情報流出に気付けずScanNetSecurity · 2021-07-26 08:00