> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Gap International: THE HAIR BAR TOKYO online store was accessed without authorization, and 4,538 card records may have leaked, about 4,000 of them used for validity checks

Card data on 4,538 cards may have leaked; about 4,000 were data used to check whether cards were valid.

Disclosed

2021-08-18

Organizations involved

1

Leaked or at risk

4.5K

4,538

Downtime

Unknown

What happened

  1. From this day, the site was accessed without authorization and card data began to leak. [1]

  2. The period of the card data leak ended on this day. [1]

  3. A possible leak came to light. [1]

  4. It reported to the Personal Information Protection Commission. [1]

  5. The investigation by a firm finished. [1]

  6. It reported to the Shibuya police station. [1]

  7. It announced the case. [1]

Impact

Card data on 4,538 cards may have leaked. About 4,000 were data used to check card validity, and only 356 orders were actually completed. [1]

Timeline

  1. Started 2021-04-23
  2. Detected 2021-06-30
  3. Disclosed 2021-08-18
  4. 117 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]ECサイトへ不正アクセス、流出したカード情報4,538件のうち約4千件は「有効性確認」データScanNetSecurity · 2021-08-20 08:00