> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

United: its Konin-todoke Seisakusho site was accessed without authorization, and card data of 1,131 customers may have leaked

Payment information was forwarded to a malicious file, and card data of 1,131 customers may have leaked.

Disclosed

2021-09-07

Organizations involved

1

Leaked or at risk

1.1K

1,131

Downtime

Unknown

What happened

  1. From this day, card data began to leak. [1]

  2. The period of the card data leak ended on this day. [1]

  3. A possible leak came to light. [1]

  4. The investigation finished. [1]

  5. It reported to the Personal Information Protection Commission. [1]

  6. It reported to the Kanazawa-nishi police station. [1]

  7. It announced the case. [1]

Impact

Card data of 1,131 customers who paid by card between December 13, 2020 and March 21, 2021 may have leaked. The payment information was being forwarded to a malicious file. [1]

Timeline

  1. Started 2020-12-13
  2. Detected 2021-04-02
  3. Disclosed 2021-09-07
  4. 268 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]「婚姻届製作所」に不正アクセス、1,131名のカード情報流出ScanNetSecurity · 2021-09-09 08:05