Dwango: several unauthorized logins to Niconico used passwords leaked from other services
Several unauthorized logins used email and password pairs leaked from other services. The number of accounts was not disclosed.
Disclosed
2021-12-10
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Impact
If an account is logged into without authorization, the points could be used or bought, the registered email address or password changed, videos or comments posted, and registered data with limited visibility, such as gender and birth date, viewed. The attacker appears to have used email and password pairs leaked from other services. [1] [2]
Timeline
- Detected, Disclosed 2021-12-10
- 1 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Data leak]
- Entry point
- Stolen credentials
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, ChuoInformation and communications
Dwango Co., Ltd.
Sources
- [1][Official]他社流出パスワードを用いた不正ログインについて(2021/12)DWANGO Co., Ltd. · 2021-12-10
- [2][News]ニコニコに複数回の不正ログイン、リスト型攻撃か 「登録情報の見直しを」ITmedia NEWS · 2021-12-10