Yamaga: its Kabuyama fugu online shop was accessed without authorization, and card data of 272 customers may have leaked
Card data of 272 customers who paid by card over about a year from November 2019 may have leaked. Announcement came 266 days after discovery.
Disclosed
2021-09-16
Organizations involved
1
Leaked or at risk
272
272
Downtime
Unknown
What happened
Card payments stopped through a system change, and the period of the card data leak ended on this day. [1]
A possible leak came to light. [1]
The investigation finished. [1]
It reported to the Shimonoseki police station and the Personal Information Protection Commission. [1]
It announced the case. [1]
Impact
Card data of 272 customers who paid by card between November 7, 2019 and December 18, 2020 may have leaked. [1]
Timeline
- Started 2019-11-07
- Detected 2020-12-24
- Disclosed 2021-09-16
- 679 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Yamaguchi, ShimonosekiWholesale and retail trade272 leaked
Yamaga Co., Ltd.
Sources
- [1][News]「こだわりふぐショップかぶやま」に不正アクセス、1年分の決済情報が流出ScanNetSecurity · 2021-09-21 08:05