Beverly Glen Laboratories: its "b.glen HP" shop was accessed without authorization, and card data of 46,702 customers may have leaked
A vulnerability in the site was exploited and a program that sends entered data outside was planted; card data of 46,702 customers may have leaked.
Disclosed
2022-01-25
Organizations involved
1
Leaked or at risk
46.7K
46,702
Downtime
Unknown
What happened
Impact
A vulnerability in part of the site's system was exploited and a program that captures data entered by customers and sends it outside was planted. Card data of 46,702 customers may have leaked, and some may have been misused. [1]
Timeline
- Detected 2021-06-10
- Disclosed 2022-01-25
- 229 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, MinatoWholesale and retail trade46,702 leaked
Beverly Glen Laboratories Inc.
Sources
- [1][News]スキンケア製品取り扱い「ビーグレンHP」に不正アクセス、46,702名分のカード情報流出ScanNetSecurity · 2022-01-27 08:05