> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Santane: its Seikotei net shop was accessed without authorization, and card data and personal data of some customers may have leaked

After the system developer reported a vulnerability, a check found traces of unauthorized access. Sales and payments were stopped.

Disclosed

2021-11-17

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. After the developer of the net shop system reported a vulnerability, it checked and found traces of unauthorized access. The same day it cut the server's network and stopped all sales and payments on the site. It reported to the payment agent and began an investigation by a third-party firm. [1]

  2. It announced the case. [1]

Impact

Credit card data and personal data of some customers may have leaked. [1]

Timeline

  1. Detected 2021-06-16
  2. Disclosed 2021-11-17
  3. 154 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]焼菓子販売「西光亭ネットショップ」に不正アクセス、パッチ配布前に被害ScanNetSecurity · 2021-11-19 08:05