Saito: unauthorized access to the "Saito Ham Official Online Store" may have leaked 4,034 card records
Card companies raised a leak concern on December 6, 2022. Tampering with the payment application may have leaked 4,034 card records.
Disclosed
2023-07-31
Organizations involved
1
Leaked or at risk
4K
4,034
Downtime
Unknown
What happened
Some credit card companies told it of a concern that card data of customers who used the site had leaked. The same day it cut access from outside. [1] [2]
The investigation ended. [1]
It announced the case and is contacting customers whose card data may have leaked individually by email and other means. [1] [2]
Impact
Credit card data of 4,034 records (3,477 card holders) and personal data of 1,299 people may have leaked. The period is September 1, 2020 to November 24, 2022. The cause is reported as tampering with the payment application. [1] [2]
Timeline
- Started 2020-09-01
- Detected 2022-12-06
- Disclosed 2023-07-31
- 1063 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Aichi, InuyamaManufacturing4,034 leaked
Saito Co., Ltd.
Sources
- [1][Official]サイトウハム 公式オンラインストア 不正アクセスによる情報漏えいについてSaito Co., Ltd. · 2023-07-31
- [2][News]「サイトウハム 公式オンラインストア」に不正アクセス、4,034件のカード情報が漏えいScanNetSecurity · 2023-08-08 08:05