Santane: its Seikotei net shop was accessed without authorization, and card data and personal data of some customers may have leaked
After the system developer reported a vulnerability, a check found traces of unauthorized access. Sales and payments were stopped.
Disclosed
2021-11-17
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
After the developer of the net shop system reported a vulnerability, it checked and found traces of unauthorized access. The same day it cut the server's network and stopped all sales and payments on the site. It reported to the payment agent and began an investigation by a third-party firm. [1]
It announced the case. [1]
Impact
Credit card data and personal data of some customers may have leaked. [1]
Timeline
- Detected 2021-06-16
- Disclosed 2021-11-17
- 154 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, ShibuyaWholesale and retail trade
Santane Ltd.
Sources
- [1][News]焼菓子販売「西光亭ネットショップ」に不正アクセス、パッチ配布前に被害ScanNetSecurity · 2021-11-19 08:05