> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Yamaga: its Kabuyama fugu online shop was accessed without authorization, and card data of 272 customers may have leaked

Card data of 272 customers who paid by card over about a year from November 2019 may have leaked. Announcement came 266 days after discovery.

Disclosed

2021-09-16

Organizations involved

1

Leaked or at risk

272

272

Downtime

Unknown

What happened

  1. From this day, card data began to leak. [1]

  2. Card payments stopped through a system change, and the period of the card data leak ended on this day. [1]

  3. A possible leak came to light. [1]

  4. The investigation finished. [1]

  5. It reported to the Shimonoseki police station and the Personal Information Protection Commission. [1]

  6. It announced the case. [1]

Impact

Card data of 272 customers who paid by card between November 7, 2019 and December 18, 2020 may have leaked. [1]

Timeline

  1. Started 2019-11-07
  2. Detected 2020-12-24
  3. Disclosed 2021-09-16
  4. 679 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]「こだわりふぐショップかぶやま」に不正アクセス、1年分の決済情報が流出ScanNetSecurity · 2021-09-21 08:05