> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Vendome Yamada: its Vendome Jewelry Online Store was accessed without authorization, and card data of 2,715 customers leaked

A malicious file was planted and the payment application altered. Card data of 2,715 customers may have leaked.

Disclosed

2021-11-25

Organizations involved

1

Leaked or at risk

2.7K

2,715

Downtime

Unknown

What happened

  1. A credit card payment provider told it of a concern about a leak. The same day it stopped the site and preserved all data. [1]

  2. The investigation by a third-party firm finished and found that a malicious file had been planted and the payment application altered. [1]

  3. It announced the case. [1]

Impact

A vulnerability in part of the site system was exploited, and card data of 2,715 customers may have leaked. Some of it may have been misused. [1]

Timeline

  1. Detected 2021-10-11
  2. Disclosed 2021-11-25
  3. 45 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]「ヴァンドームジュエリーオンラインストア」に不正アクセス、2,715名分のカード情報が流出ScanNetSecurity · 2021-11-29 08:05