Sekiya Shokuhin: its Ise Sekiya online shop was accessed without authorization, and card data of 23 customers may have leaked
Card data of 23 customers who paid by card over a few days in March 2021 may have leaked. The site was stopped on March 16.
Disclosed
2021-09-14
Organizations involved
1
Leaked or at risk
23
23
Downtime
Unknown
What happened
A possible leak came to light. [1]
Another unauthorized access occurred and the site was stopped. The period of the card data leak ended on this day. [1]
It reported to the police. [1]
The investigation finished. [1]
It reported to the Personal Information Protection Commission. [1]
It announced the case. [1]
Impact
Card data of 23 customers who paid by card between March 11 and March 16, 2021 may have leaked. [1]
Timeline
- Started 2021-03-11
- Detected 2021-03-13
- Disclosed 2021-09-14
- 187 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Mie, IseManufacturing23 leaked
Sekiya Shokuhin Co., Ltd.
Sources
- [1][News]海産珍味取扱い「伊勢せきやオンラインショップ」に不正アクセス、カード情報が流出ScanNetSecurity · 2021-09-17 08:05