> JapanHacked_
[Contained][Severity: Critical][Credential abuse]

Tokyo Verdy: card data of 2,726 customers may have leaked from its official online store

On 6 February 2024 the J.League club Tokyo Verdy announced that its official online store had been accessed without authorization and that card data of 2,726 customers may have leaked. A card company raised the concern on 21 December 2023 and the store was shut; the investigation found that the payment application had been tampered with after unauthorized access to the system's developer administrator account. Card holder names, numbers, expiry dates and security codes of customers who paid by card between 22 August and 20 December 2023 are affected, and some cards may have been misused.

Disclosed

2024-02-06

Organizations involved

1

Leaked or at risk

2.7K

2,726

Downtime

Unknown

Timeline

  1. Detected 2023-12-21
  2. Disclosed 2024-02-06
  3. 47 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak][Fraud]
Entry point
Unknown

Data exposed or at risk

[Name][Payment card]

Organizations involved

Open in organization search

Sources

  1. [1][Official]「東京ヴェルディ公式オンラインストア」への不正アクセスによる個人情報漏洩に関するお詫びとお知らせTokyo Verdy · 2024-02-06