> JapanHacked_
[Contained][Severity: Major][Credential abuse]

BOOK WALKER: unauthorized logins to its e-book store "BOOK☆WALKER" used email addresses and passwords leaked elsewhere

Logins used email addresses and passwords apparently obtained elsewhere. It says no personal data leaked from the company and there was no system failure.

Disclosed

2022-06-10

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It announced the case. It found unauthorized logins with email addresses and passwords apparently obtained elsewhere. It paused the "gift purchase" function, introduced login notification emails and asked members to reset passwords. [1]

  2. At 13:30 it lifted the pause on the "gift purchase" function. [1]

Timeline

  1. Disclosed 2022-06-10
  2. 1 days

Attack or cause

Method
[Credential abuse]
Impact
[Fraud]
Entry point
Stolen credentials

Data exposed or at risk

[Passwords]

Organizations involved

Open in organization search

Sources

  1. [1][Official]【重要なお知らせ】外部流出アカウント情報による不正アクセスについてBOOK WALKER Co., Ltd. · 2022-06-10