Babyland Tama Baby: the "EC site Babyland" was accessed without authorization and card data of 5,246 customers leaked
The payment application was tampered with and card data of 5,246 customers leaked. Card companies raised it in December 2022 and card payments on the new site were stopped.
Disclosed
2023-03-23
Organizations involved
1
Leaked or at risk
5.2K
5,246
Downtime
Unknown
What happened
Impact
Card data of 5,246 users of the old site leaked and some may have been misused. The cause was that a vulnerability in part of the site's system was exploited and the payment application tampered with. [1]
Timeline
- Started 2022-11-04
- Detected 2022-12-16
- Disclosed 2023-03-23
- 139 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, MachidaWholesale and retail trade5,246 leaked
Babyland Tama Baby Co., Ltd.
Sources
- [1][News]「ECサイト ベビーランド」への不正アクセスで5,246名のカード情報が漏えいScanNetSecurity · 2023-04-03 08:05