Kinokuniya: unauthorized access to magazine delivery sites, and data of up to 9,881 people may have leaked

1. 2023-11-01

   Police told it of a cyberattack on its Japanese magazine delivery information site, and it began investigating. It found that database table names had been obtained. [2]

2. 2023-12-21

   It announced the case. It found a vulnerability in part of the sites and said it has been fixed. Its client Fujisan Magazine Service announced the impact the same day. [1] [2]

Data of 9,881 people in total may have leaked: 294 names from Japanese magazine delivery data, 7,491 records of name, address and phone number from the overseas magazine delivery management system, and 2,096 such records from the academic journal system. There is no trace of the table contents being accessed or the data being taken. Credit card and bank account data are not included. [2] [3]

Fujisan Magazine Service, which had outsourced overseas magazine delivery, said the name, kana, postal code and address of 6,329 subscriptions may be affected. It says it has not confirmed that the outsourced data flowed out. [1]