Gap International: THE HAIR BAR TOKYO online store was accessed without authorization, and 4,538 card records may have leaked, about 4,000 of them used for validity checks
Card data on 4,538 cards may have leaked; about 4,000 were data used to check whether cards were valid.
Disclosed
2021-08-18
Organizations involved
1
Leaked or at risk
4.5K
4,538
Downtime
Unknown
What happened
From this day, the site was accessed without authorization and card data began to leak. [1]
The period of the card data leak ended on this day. [1]
A possible leak came to light. [1]
It reported to the Personal Information Protection Commission. [1]
The investigation by a firm finished. [1]
It reported to the Shibuya police station. [1]
It announced the case. [1]
Impact
Card data on 4,538 cards may have leaked. About 4,000 were data used to check card validity, and only 356 orders were actually completed. [1]
Timeline
- Started 2021-04-23
- Detected 2021-06-30
- Disclosed 2021-08-18
- 117 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, ShibuyaWholesale and retail trade4,538 leaked
Gap International Co., Ltd.
Sources
- [1][News]ECサイトへ不正アクセス、流出したカード情報4,538件のうち約4千件は「有効性確認」データScanNetSecurity · 2021-08-20 08:00