Unimedia: its hometown-tax support site "Furusato Premium" was hit by a password list attack
An anomaly on the admin screen revealed a huge number of password list attacks. The same day it added a blocking mechanism and force-reset passwords.
Disclosed
2022-03-02
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
At 1 pm it noticed an anomaly on the admin screen of "Furusato Premium" and found disk usage had reached 100%. Investigating the cause, it found it may have been hit by a huge number of password list attacks. The same day it introduced a mechanism to block the attacks and forced a password reset. [1]
It published the investigation result. [1]
Timeline
- Detected 2022-02-17
- Disclosed 2022-03-02
- 13 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Fraud]
- Entry point
- Stolen credentials
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, ChiyodaInformation and communications
Unimedia Inc.
Sources
- [1][News]「ふるさとプレミアム」にパスワードリスト型攻撃、発覚日に遮断システム導入とパスワード強制リセット実施ScanNetSecurity · 2022-03-09 08:05