> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Sekiya Shokuhin: its Ise Sekiya online shop was accessed without authorization, and card data of 23 customers may have leaked

Card data of 23 customers who paid by card over a few days in March 2021 may have leaked. The site was stopped on March 16.

Disclosed

2021-09-14

Organizations involved

1

Leaked or at risk

23

23

Downtime

Unknown

What happened

  1. From this day, card data began to leak. [1]

  2. A possible leak came to light. [1]

  3. Another unauthorized access occurred and the site was stopped. The period of the card data leak ended on this day. [1]

  4. It reported to the police. [1]

  5. The investigation finished. [1]

  6. It reported to the Personal Information Protection Commission. [1]

  7. It announced the case. [1]

Impact

Card data of 23 customers who paid by card between March 11 and March 16, 2021 may have leaked. [1]

Timeline

  1. Started 2021-03-11
  2. Detected 2021-03-13
  3. Disclosed 2021-09-14
  4. 187 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]海産珍味取扱い「伊勢せきやオンラインショップ」に不正アクセス、カード情報が流出ScanNetSecurity · 2021-09-17 08:05