> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

DRESS DESIGN WORKS: its dress shop "Tika" was accessed without authorization, and card data of up to 8,306 customers may have leaked

The payment application was altered, and card data of up to 8,306 customers may have leaked. Some may have been misused.

Disclosed

2021-12-06

Organizations involved

1

Leaked or at risk

8.3K

8,306

Downtime

Unknown

What happened

  1. The system company it uses told it of a concern about a leak of card data. [1]

  2. It stopped card payments and began an investigation by a third-party firm. [1]

  3. The investigation finished. [1]

  4. It announced the case. [1]

Impact

Unauthorized access by a third party to the site altered the payment application, and card data of up to 8,306 customers may have leaked. Some of it may have been misused. [1]

Timeline

  1. Detected 2021-04-21
  2. Disclosed 2021-12-06
  3. 229 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]ドレス販売「Tika」に不正アクセス、最大8,306名のカード情報が流出ScanNetSecurity · 2021-12-09 08:05