LINE Pay: campaign participation data was viewable on GitHub, involving 51,543 accounts in Japan

1. 2021-09-12

   Around 15:13 an investigation program and payment data were unintentionally uploaded to GitHub and became viewable. [1] [2]

2. 2021-11-24

   It detected the data at 18:27 through internal monitoring and finished deleting it from GitHub at 18:45. [1]

3. 2021-11-30

   It finished checking the access and secondary spread. [1]

4. 2021-12-06

   Around 16:00 it notified the affected users and announced the case. [1] [2]

The identifiers, merchant management numbers and campaign information (name, payment amount and date) of 51,543 accounts in Japan (133,484 including overseas) for December 26, 2020 to April 2, 2021 were viewable from September 12 to November 24, 2021. Names, addresses, phone numbers, email addresses, card numbers and account numbers were not included. Outsiders accessed the data 11 times. [1] [2]