> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Link It: its LINK IT MALL shop was accessed without authorization, and card data of 6,197 customers may have leaked

The payment application was altered, and card data of 6,197 customers may have leaked. Some may have been misused.

Disclosed

2021-11-04

Organizations involved

1

Leaked or at risk

6.2K

6,197

Downtime

Unknown

What happened

  1. A payment agent told it of a concern about card data leaking. The same day it stopped card payments and began an investigation by a third-party firm. [1]

  2. The investigation finished. [1]

  3. It announced the case. [1]

Impact

Unauthorized access to the site system altered the payment application, and card data of 6,197 customers may have leaked. Some of it may have been misused. [1]

Timeline

  1. Detected 2021-04-20
  2. Disclosed 2021-11-04
  3. 198 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]「LINK IT MALL」に不正アクセス、6,197名のカード情報流出の可能性ScanNetSecurity · 2021-11-08 08:05