> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Beverly Glen Laboratories: its "b.glen HP" shop was accessed without authorization, and card data of 46,702 customers may have leaked

A vulnerability in the site was exploited and a program that sends entered data outside was planted; card data of 46,702 customers may have leaked.

Disclosed

2022-01-25

Organizations involved

1

Leaked or at risk

46.7K

46,702

Downtime

Unknown

What happened

  1. Some card companies told it that card data might be leaking. It began an internal investigation and one by a third-party firm. [1]

  2. The third-party investigation finished and confirmed that card data had leaked and some might have been misused. [1]

  3. It announced the case. [1]

Impact

A vulnerability in part of the site's system was exploited and a program that captures data entered by customers and sends it outside was planted. Card data of 46,702 customers may have leaked, and some may have been misused. [1]

Timeline

  1. Detected 2021-06-10
  2. Disclosed 2022-01-25
  3. 229 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card]

Organizations involved

Open in organization search

Sources

  1. [1][News]スキンケア製品取り扱い「ビーグレンHP」に不正アクセス、46,702名分のカード情報流出ScanNetSecurity · 2022-01-27 08:05