> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

TRANSIC: its bag and leather goods online shop TRANSIC was accessed without authorization, and card data of 1,074 customers may have leaked

Card data of 1,074 customers from about a year may have leaked through unauthorized access.

Disclosed

2021-07-13

Organizations involved

1

Leaked or at risk

1.1K

1,074

Downtime

Unknown

What happened

  1. From this day, the site was accessed without authorization and card data began to leak. [1]

  2. A credit card company told the company of a concern about a leak. [1]

  3. The investigation finished. [1]

  4. It reported to the Personal Information Protection Commission. [1]

  5. It reported the damage to the police. [1]

  6. The site was rebuilt and reopened. [1]

  7. TRANSIC and First Trade announced the case. [1]

Impact

The names, numbers, expiry dates and security codes of 1,074 customers who paid by card between December 18, 2019 and January 6, 2021 may have leaked. Operation of the site was split off to the subsidiary TRANSIC Inc. on April 26, 2021. [1]

Timeline

  1. Started 2019-12-18
  2. Detected 2021-01-07
  3. Disclosed 2021-07-13
  4. 573 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]バッグ・革小物のECサイト「TRANSIC」に不正アクセス、1,074名分のカード情報流出ScanNetSecurity · 2021-07-15 08:00