> JapanHacked_
[Contained][Severity: Critical][Web app exploit]

Ise Shoyu Honpo: card data of 2,727 and personal data of 9,034 customers may have leaked from its online shop

On 19 January 2024 Yamamori announced unauthorized access to the server of its "Ise Shoyu Honpo online shop" (ScanNetSecurity). Its report of 28 May said that personal data of 9,034 customers and card data of 2,727 customers may have leaked from the site, which its subsidiary Ise Shoyu Honpo runs. A vulnerability in the site was found on 18 January, and the site was cut off from the online payment service the same day. A new site is being built.

Disclosed

2024-01-19

Organizations involved

1

Leaked or at risk

9K

9,034

Downtime

Unknown

Timeline

  1. Detected 2024-01-18
  2. Disclosed 2024-01-19
  3. 1 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]『伊勢醤油本舗オンラインショップ』不正アクセスによる クレジットカード情報流出懸念に関するお詫びとご報告Yamamori · 2024-05-28
  2. [2][News]「伊勢醤油本舗オンラインショップ」に不正アクセス、個人情報が漏えいした可能性ScanNetSecurity · 2024-01-29