> JapanHacked_
[Resolved][Severity: Critical][Web app exploit]

SOURCENEXT: the payment application of its online shop was tampered with and card data of 112,132 customers leaked

A system vulnerability was exploited and the payment application tampered with, so card data of 112,132 customers who paid from November 2022 to January 2023 leaked.

Disclosed

2023-02-14

Organizations involved

1

Leaked or at risk

121K

120,982

Downtime

Unknown

What happened

  1. Card companies told it of a concern that card data had leaked. [1]

  2. It stopped card payments at the online shop. [1]

  3. The external investigation finished. [1]

  4. It announced the case. [1] [2]

Impact

The card holder name, number, expiry date and security code of 112,132 customers who paid by card from November 15, 2022 to January 17, 2023 leaked. In addition, personal data of 120,982 people may have leaked: name, email address and, for those who entered them, postal code, address and phone number. Passwords are not included. The cause was that a vulnerability in part of the system was exploited and the payment application tampered with. It notified the Personal Information Protection Commission, the Kanto Bureau of Communications and the police. [1] [2]

Timeline

  1. Started 2022-11-15
  2. Detected 2023-01-04
  3. Disclosed 2023-02-14
  4. 91 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name][E-mail address][Postal address][Phone number]

Organizations involved

Open in organization search

Sources

  1. [1][Official]弊社が運営する「ソースネクストオンラインショップ」への不正アクセスによる個人情報漏えいに関するお詫びとお知らせ｜ソースネクストSOURCENEXT CORPORATION · 2023-02-14
  2. [2][News]ソースネクスト・サイトへ不正アクセス、112,132名のカード情報漏えいScanNetSecurity · 2023-02-15 08:05