Tanax: its online shop was accessed without authorization, and card data of 26 customers may have leaked, including 3-D Secure passwords
The payment application was altered, and card data of 26 customers may have leaked. Announcement came 293 days after discovery.
Disclosed
2021-10-27
Organizations involved
1
Leaked or at risk
26
26
Downtime
Unknown
What happened
Impact
Timeline
- Started 2020-12-07
- Detected 2021-01-07
- Disclosed 2021-10-27
- 324 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Osaka, IbarakiManufacturing26 leaked
Tanax, Inc.
Sources
- [1][News]バイク関連製品通販サイトで個人情報流出のおそれ - 3DセキュアもSecurity NEXT · 2021-10-28
- [2][News]バイク用品取扱「TANAXオンラインショップ」に不正アクセス、3Dセキュアパスワード含むカード情報流出ScanNetSecurity · 2021-10-29 08:05