> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

Tachibana Shobo: its former website was accessed without authorization, and card data of 1,144 customers may have leaked

The payment module was altered, and card data of 1,144 customers may have leaked. Some may have been misused.

Disclosed

2022-01-11

Organizations involved

1

Leaked or at risk

1.1K

1,144

Downtime

Unknown

What happened

  1. Some card companies told it of concerns about leaked card data. It stopped card payments the same day and began an investigation by a third-party firm. [1]

  2. The investigation finished and confirmed that card data had leaked and some might have been misused. [1]

  3. It announced the case. [1]

Impact

A vulnerability in part of the system was exploited and the credit card payment module was altered; card data of 1,144 customers may have leaked. [1]

Timeline

  1. Detected 2021-09-08
  2. Disclosed 2022-01-11
  3. 125 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card]

Organizations involved

Open in organization search

Sources

  1. [1][News]旧「立花書房ウェブサイト」に不正アクセス、1,144名のカード情報が流出ScanNetSecurity · 2022-01-13 08:05