> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Kanetaya Furniture: its ROOMDECO online shop was accessed without authorization, and card data and login data leaked

A system vulnerability was exploited, the payment application was altered, and card data of buyers may have leaked.

Disclosed

2021-10-28

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The company maintaining the site told it of a concern about card data leaking. [1]

  2. It closed the site and began an investigation by a third-party firm. [1]

  3. The investigation finished. [1]

  4. It announced the case. [1]

Impact

A vulnerability in part of the site system was exploited and the payment application altered. Card data of buyers may have leaked. [1]

Timeline

  1. Detected 2021-06-07
  2. Disclosed 2021-10-28
  3. 143 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]かねたや家具店運営のECサイトに不正アクセス、カード情報とログイン情報が流出ScanNetSecurity · 2021-11-02 08:05