Caucus (now Shuri Sekken): its SuiSavon online shop was accessed without authorization, and card and personal data of up to 1,217 customers leaked
The payment application was altered, and personal and card data of up to 1,217 customers leaked.
Disclosed
2021-12-20
Organizations involved
1
Leaked or at risk
1.2K
1,217
Downtime
Unknown
What happened
Impact
Unauthorized access by a third party to the system altered the payment application, and personal and card data of up to 1,217 customers leaked. The company was then named Caucus and changed its name to Shuri Sekken in October 2024. [1]
Timeline
- Detected 2021-04-21
- Disclosed 2021-12-20
- 243 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Okinawa, NahaManufacturing1,217 leaked
Shuri Sekken Co., Ltd.
Sources
- [1][News]「SuiSavon-首里石鹸-オンラインショップ」に不正アクセス、最大1,217名のカード情報流出ScanNetSecurity · 2021-12-23 08:05