TRANSIC: its bag and leather goods online shop TRANSIC was accessed without authorization, and card data of 1,074 customers may have leaked
Card data of 1,074 customers from about a year may have leaked through unauthorized access.
Disclosed
2021-07-13
Organizations involved
1
Leaked or at risk
1.1K
1,074
Downtime
Unknown
What happened
From this day, the site was accessed without authorization and card data began to leak. [1]
A credit card company told the company of a concern about a leak. [1]
The investigation finished. [1]
It reported to the Personal Information Protection Commission. [1]
It reported the damage to the police. [1]
The site was rebuilt and reopened. [1]
Impact
The names, numbers, expiry dates and security codes of 1,074 customers who paid by card between December 18, 2019 and January 6, 2021 may have leaked. Operation of the site was split off to the subsidiary TRANSIC Inc. on April 26, 2021. [1]
Timeline
- Started 2019-12-18
- Detected 2021-01-07
- Disclosed 2021-07-13
- 573 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, SetagayaWholesale and retail trade1,074 leaked
TRANSIC Inc.
Sources
- [1][News]バッグ・革小物のECサイト「TRANSIC」に不正アクセス、1,074名分のカード情報流出ScanNetSecurity · 2021-07-15 08:00