> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

LogoVista: its website was accessed without authorization, and about 128,000 member email addresses leaked

About 128,000 member email addresses leaked through SQL injection. It came to light when a customer reported spam.

Disclosed

2021-09-24

Organizations involved

1

Leaked or at risk

128K

128,000

Downtime

Unknown

What happened

  1. From this day until the 22nd, the website was attacked with SQL injection. [1]

  2. A customer reported spam, which brought the case to light, and it announced the case the same day. [1] [2]

Impact

About 128,000 member email addresses leaked. No leak of other information was reported. [1] [2]

Timeline

  1. Started 2021-09-18
  2. Detected, Disclosed 2021-09-24
  3. 6 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][Official]弊社ホームページへの不正アクセスによる被害発生のお詫びとお知らせLogoVista Corporation · 2021-09-24
  2. [2][News]翻訳ソフト販売ロゴヴィスタにSQLインジェクション攻撃、約12万8,000件の会員アドレスが流出ScanNetSecurity · 2021-09-29 08:05