> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Songbook Cafe: its online shop for childcare workers Hoick was accessed without authorization, and card data of up to 2,365 customers may have leaked

Card data of up to 2,365 customers from about five months may have leaked, along with login information.

Disclosed

2021-07-06

Organizations involved

1

Leaked or at risk

2.4K

2,365

Downtime

Unknown

What happened

  1. From this day, the site was accessed without authorization and card data began to leak. [1]

  2. Card data up to this day is covered. [1]

  3. A credit card company told the company of a concern about a leak, and the site was stopped the same day. [1]

  4. It received the final report of the investigation. [1]

  5. It announced the case. [1]

Impact

The names, numbers, expiry dates and security codes of up to 2,365 customers who paid by card between October 29, 2020 and April 8, 2021 may have leaked. Login information also leaked. [1]

Timeline

  1. Started 2020-10-29
  2. Detected 2021-04-09
  3. Disclosed 2021-07-06
  4. 250 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]保育者向けECサイトに不正アクセス、最大2,365件のカード情報が流出の可能性ScanNetSecurity · 2021-07-07 08:00