> JapanHacked_
[Resolved][Severity: Major][Credential abuse]

View Card: unauthorized logins hit its member service "VIEW's NET", member data in 560 accounts may have been seen, and four services were stopped temporarily

Unauthorized login attempts began on June 22, 560 accounts were apparently logged in without authorization, and four services were stopped.

Disclosed

2022-06-24

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Unauthorized login attempts began at about 11:42 a.m. From 7:11 p.m., four services were stopped. [1]

  2. It suspended the accounts that seem to have been logged in without authorization. [1]

  3. It resumed the services at 10 a.m. and announced the case. [1]

Impact

There were 560 accounts that were apparently logged in without authorization. Names, email addresses and the last four digits of card numbers may have been seen. [1]

Timeline

  1. Started, Detected 2022-06-22
  2. Disclosed 2022-06-24
  3. 2 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak][Service outage]
Entry point
Stolen credentials

Data exposed or at risk

[Name][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][Official]「VIEW’s NET」への不正ログインに関するお詫びとお知らせView Card Co., Ltd. · 2022-06-24