> JapanHacked_
[Resolved][Severity: Major][Web app exploit]

Nishinomiya City: its internal groupware was hit by an SQL injection attack, user data leaked and mails impersonating staff were sent

An attack on the internal groupware leaked user data, and emails impersonating staff were sent inside and outside the city hall.

Disclosed

2021-12-07

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It learned that the internal groupware used by staff had been attacked from outside, user information had leaked and mails impersonating staff had been sent inside and outside. [2]

  2. It announced the case. [1] [2]

Timeline

  1. Detected 2021-12-06
  2. Disclosed 2021-12-07
  3. 1 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak][Fraud]
Entry point
Web app

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]庁内グループウェアへのサイバー攻撃についてNishinomiya City · 2021-12-07
  2. [2][News]西宮市のグループウェアにSQLインジェクション攻撃、不審メールを送信ScanNetSecurity · 2021-12-10 08:05