> JapanHacked_
[Contained][Severity: Major][Intrusion]

Wood Friends: malicious programs were placed on its corporate site and others, and entered personal data may have leaked

Rights in its site management system were changed without authorization in November 2022, and malicious programs were found on three sites in February. Data may have leaked.

Disclosed

2023-02-21

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The management system of the corporate site became unusable, and it found that access rights had been changed without authorization. [1]

  2. An investigation by an outside specialist found malicious programs on three sites: the Wood Friends corporate site, Nagoyako Golf Club and Shinrin Koen Golf Course. [1]

  3. It announced the case. [1]

Impact

On two of the three sites, the Wood Friends corporate site and Nagoyako Golf Club, personal data entered on the site may have leaked. On Shinrin Koen Golf Course there was unauthorized access only. The numbers and items are in the images of the announcement and are not shown in the article. [1]

Timeline

  1. Started, Detected 2022-11-25
  2. Disclosed 2023-02-21
  3. 88 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]ゴルフ場運営ウッドフレンズ運営の3サイトに不正アクセス、個人情報が漏えいScanNetSecurity · 2023-03-24 08:05