> JapanHacked_
[Resolved][Severity: Major][Intrusion]

Media Kobo: names of up to 269 casts leaked from its voice-call social network "Characden"

Unauthorized access to Characden leaked names of up to 269 casts. Access control from outside and monitoring were weak.

Disclosed

2021-10-06

Organizations involved

1

Leaked or at risk

269

269

Downtime

Unknown

What happened

  1. A DM reporting a leak of personal data reached its official social media account. [1]

  2. It announced the case. [1]

  3. It published the result of an investigation by an external firm. [1]

Impact and cause

Names of up to 269 casts leaked, and payout amounts may also have been included, though this could not be confirmed. The cause was weak access control from outside networks and weak monitoring in the app. The investigation found no deeper intrusion into the system. [1]

Timeline

  1. Detected 2021-10-04
  2. Disclosed 2021-10-06
  3. 2 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name]

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社運営サービスにおける個人情報の流出に関する調査結果のお知らせMedia Kobo, Inc. · 2021-12-22