> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Komaki Gakki: its online shop was accessed without authorization, and card data of 1,513 customers may have leaked

Card data of 1,513 customers who paid by card may have leaked through unauthorized access. Announcement came 185 days after discovery.

Disclosed

2021-08-23

Organizations involved

1

Leaked or at risk

1.5K

1,513

Downtime

Unknown

What happened

  1. A possible leak of card data came to light. [1]

  2. The investigation by a third-party firm finished. [1]

  3. It reported to the Personal Information Protection Commission and the Kuramae police station. [1]

  4. It announced the case. [1]

Impact

Card data of 1,513 customers who paid by card between November 27, 2019 and February 19, 2021 may have leaked. [1]

Timeline

  1. Started 2019-11-27
  2. Detected 2021-02-19
  3. Disclosed 2021-08-23
  4. 635 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]「コマキ楽器WEBサイト」に不正アクセス、1,513名分のカード情報流出ScanNetSecurity · 2021-08-25 08:00