Ayahadio: its online shop was accessed without authorization, and card data and customers' personal data may have leaked
A malicious file was planted in the system of its production and maintenance contractor, and card data and registered customers' personal data may have leaked.
Disclosed
2021-12-01
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Impact
Unauthorized access by a third party to the contractor's system planted a malicious file, and card data and registered customers' personal data may have leaked. The source gives no count. [1]
Timeline
- Detected 2021-09-03
- Disclosed 2021-12-01
- 89 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Supplier
Data exposed or at risk
Organizations involved
[Breached][Critical]Shiga, OtsuWholesale and retail trade
Ayahadio Co., Ltd.
Sources
- [1][News]ホームセンター経営「アヤハディオネットショッピング」に不正アクセス、カード情報が流出ScanNetSecurity · 2021-12-06 08:05