> JapanHacked_
[Resolved][Severity: Critical][Intrusion]

Ayahadio: its online shop was accessed without authorization, and card data and customers' personal data may have leaked

A malicious file was planted in the system of its production and maintenance contractor, and card data and registered customers' personal data may have leaked.

Disclosed

2021-12-01

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The partner company that builds and maintains the site told it of a concern about leaks of card and personal data. [1]

  2. It stopped the site service and began an investigation by a third-party firm. [1]

  3. The investigation finished. [1]

  4. It announced the case. [1]

Impact

Unauthorized access by a third party to the contractor's system planted a malicious file, and card data and registered customers' personal data may have leaked. The source gives no count. [1]

Timeline

  1. Detected 2021-09-03
  2. Disclosed 2021-12-01
  3. 89 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Supplier

Data exposed or at risk

[Payment card][Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]ホームセンター経営「アヤハディオネットショッピング」に不正アクセス、カード情報が流出ScanNetSecurity · 2021-12-06 08:05