> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Yomiuri Joho Kaihatsu Osaka: its online shop Yomifa-net was accessed without authorization, and card data of 1,301 customers leaked, with 58 customers' cards misused for about 7.67 million yen

Card data of 1,301 customers leaked, and 58 customers' cards were misused for about 7.67 million yen.

Disclosed

2021-07-14

Organizations involved

1

Leaked or at risk

1.3K

1,301

Downtime

Unknown

What happened

  1. From this day, the site was accessed without authorization and card data began to leak. [1]

  2. A credit card company told the company of a concern about a leak. Card data up to this day is covered. [1]

  3. The investigation finished. [1]

  4. It reported the damage to the police. [1]

  5. It reported to the Personal Information Protection Commission. [1]

  6. It announced the case. [1]

Impact

Card data of 1,301 customers who paid between October 24, 2020 and March 2, 2021 leaked. By the end of June, cards of 58 customers had been misused in about 260 transactions totalling 7,674,605 yen. [1]

Timeline

  1. Started 2020-10-24
  2. Detected 2021-03-02
  3. Disclosed 2021-07-14
  4. 263 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]「よみファねっと」へ不正アクセスでカード情報流出、767万円分の不正利用確認ScanNetSecurity · 2021-07-15 08:00