> JapanHacked_
[Resolved][Severity: Moderate][Intrusion]

ROUND ONE: its server was accessed without authorization and the store fee page was tampered with, redirecting visitors to inappropriate web pages

From the night of February 25 to the midday of the 26th the store fee page was tampered with and redirected visitors to inappropriate web pages. It says no personal data leaked.

Disclosed

2023-02-27

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. From 22:53 the store fee page was tampered with so that clicking the fee table link sent visitors to another site. The same day it confirmed the redirects to inappropriate web pages and began an investigation. [1] [2]

  2. By 11:10 it had deleted the tampered pages and restored the site. [1]

  3. It announced the case and apologized. [1] [2]

Impact

The tampering lasted about half a day. The cause was unauthorized access to the server. The company says no personal data leaked from the official site through the tampering. [1]

Timeline

  1. Started, Detected 2023-02-25
  2. Disclosed 2023-02-27
  3. 2 days

Attack or cause

Method
[Intrusion]
Impact
[Site defacement]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]ラウンドワン公式サイト→アダルトサイトに飛んだとの報告多数　運営元「第三者からの不正アクセスによるもの」と説明して謝罪（1/2） | ねとらぼNlab · 2023-02-28
  2. [2][News]ラウンドワンのホームページが改ざん被害、不適切なWebページに誘導ScanNetSecurity · 2023-03-23 08:05