Sapporo Nissin Electronics: someone logged into the app used to update its website without authorization and placed a page for phishing
An unauthorized login to the site update app placed a phishing page. No personal data leaked.
Disclosed
2021-07-12
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Impact
No personal data was stored on the site. The parent company is Nippon Signal. [1]
Timeline
- Started 2021-05-25
- Detected 2021-05-26
- Disclosed 2021-07-12
- 48 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Site defacement]
- Entry point
- Stolen credentials
Data exposed or at risk
–
Organizations involved
[Breached][Moderate]Hokkaido, Sapporo, Toyohira-kuManufacturing
Sapporo Nissin Electronics Co., Ltd.
Sources
- [1][News]サイト更新用アプリケーションに不正ログイン、フィッシング目的のページ設置の改ざん被害ScanNetSecurity · 2021-07-15 08:00