Yomiuri Joho Kaihatsu Osaka: its online shop Yomifa-net was accessed without authorization, and card data of 1,301 customers leaked, with 58 customers' cards misused for about 7.67 million yen
Card data of 1,301 customers leaked, and 58 customers' cards were misused for about 7.67 million yen.
Disclosed
2021-07-14
Organizations involved
1
Leaked or at risk
1.3K
1,301
Downtime
Unknown
What happened
From this day, the site was accessed without authorization and card data began to leak. [1]
A credit card company told the company of a concern about a leak. Card data up to this day is covered. [1]
The investigation finished. [1]
It reported the damage to the police. [1]
It reported to the Personal Information Protection Commission. [1]
It announced the case. [1]
Impact
Card data of 1,301 customers who paid between October 24, 2020 and March 2, 2021 leaked. By the end of June, cards of 58 customers had been misused in about 260 transactions totalling 7,674,605 yen. [1]
Timeline
- Started 2020-10-24
- Detected 2021-03-02
- Disclosed 2021-07-14
- 263 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Osaka, Osaka, Kita-kuWholesale and retail trade1,301 leaked
Yomiuri Joho Kaihatsu Osaka Co., Ltd.
Sources
- [1][News]「よみファねっと」へ不正アクセスでカード情報流出、767万円分の不正利用確認ScanNetSecurity · 2021-07-15 08:00