> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Groundworks: its EVANGELION STORE (online) was accessed without authorization, and 17,828 card records may have leaked

Malicious files and code were placed in the payment application, and 17,828 card records and more may have leaked.

Disclosed

2021-11-30

Organizations involved

1

Leaked or at risk

17.8K

17,828

Downtime

Unknown

What happened

  1. From this day, the period in which card data and more may have leaked began. [2]

  2. The period in which data may have leaked ended on this day. [2]

  3. A card company pointed out a concern about a leak. The same day it stopped card payments and closed the EC site. [2]

  4. It announced the case and notified the customers concerned by email. [1] [2]

Impact

Credit card data of 17,828 records from customers who used the site between June 8, 2020 and June 30, 2021 may have leaked. It includes the card holder name, number, expiry date and security code, plus member email addresses and passwords. The EC site did not hold card data; unauthorized access placed malicious files and code that collected data at payment. [1] [2]

Timeline

  1. Started 2020-06-08
  2. Detected 2021-07-12
  3. Disclosed 2021-11-30
  4. 540 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name][E-mail address][Passwords]

Organizations involved

Open in organization search

Sources

  1. [1][Official]「EVANGELION STORE(オンライン)」への 不正アクセスによる個人情報漏えいに関するお知らせ – エヴァンゲリオン公式サイトEVANGELION official site · 2021-11-30
  2. [2][News]「エヴァ」公式ECでクレカ情報流出か　セキュリティコード含む1万7828件 - ITmedia NEWSITmedia NEWS · 2021-12-01