WOWOW: an authentication error at login to "WOWOW On Demand" let users see other customers' contract and viewing data, affecting up to 44,144 people

1. 2023-06-09

   From about 13:00, a defect began in which user authentication was not performed correctly during login. [1] [2]

2. 2023-06-22

   It confirmed the defect and applied a fix on June 22 and 23. [1] [3]

3. 2023-06-30

   It announced the case, putting the number of affected people at up to 80,879. [1] [3]

4. 2023-07-02

   It confirmed a new leak and applied a system fix the same day. [2] [4]

5. 2023-07-05

   It published a follow-up. It extended the period to 21:00 on July 2, re-examined the people concerned and revised the number to up to 44,144. The cause was a processing error in the WOWOW Online user authentication system, and it is also checking whether the same thing happened before June 8. [2] [4]

When another customer was logged in at the same time, some "My Page" menus could show part of that other customer's information and allow procedures such as changing the registered credit card. The data that may have been seen includes contract information (type, monthly fee, next billing date, last three digits of the card number), device name, payment history, payment method, viewing history, download information and favorite titles. Names, addresses and phone numbers were not included, and no misuse of the information has been confirmed. [1] [2] [4]