> JapanHacked_
[Resolved][Severity: Major][Credential abuse]

KLab: unauthorized logins to KLab ID, likely a password-list attack, were confirmed on 2,846 accounts

Unauthorized logins using IDs and passwords obtained elsewhere were confirmed on 2,846 accounts. Two-step verification was made mandatory for all users.

Disclosed

2021-10-27

Organizations involved

1

Leaked or at risk

2.8K

2,846

Downtime

Unknown

What happened

  1. From 01:09, unauthorized logins to KLab ID occurred. [1]

  2. It detected the unauthorized logins at 16:50. At 22:57 it made email-based two-step verification mandatory for all accounts. [1]

  3. It announced the case. [1]

Impact

Unauthorized logins were confirmed on 2,846 accounts (as of 18:00 on October 26). Email addresses, secret questions and answers, birth dates, genders, languages, names of linked apps and all information viewable within linked apps may have been seen. Passwords were stored with one-way encryption and salted hashes, and no leak from KLab was confirmed. The cause was most likely a password-list attack using IDs and passwords obtained outside KLab. [1]

Timeline

  1. Started 2021-10-24
  2. Detected 2021-10-26
  3. Disclosed 2021-10-27
  4. 3 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak]
Entry point
Stolen credentials

Data exposed or at risk

[E-mail address][Date of birth][Gender][Passwords]

Organizations involved

Open in organization search

Sources

  1. [1][Official]KLab ID への不正ログインに関するお知らせKLab Inc. · 2021-10-27