Tokyo Verdy: card data of 2,726 customers may have leaked from its official online store
On 6 February 2024 the J.League club Tokyo Verdy announced that its official online store had been accessed without authorization and that card data of 2,726 customers may have leaked. A card company raised the concern on 21 December 2023 and the store was shut; the investigation found that the payment application had been tampered with after unauthorized access to the system's developer administrator account. Card holder names, numbers, expiry dates and security codes of customers who paid by card between 22 August and 20 December 2023 are affected, and some cards may have been misused.
Disclosed
2024-02-06
Organizations involved
1
Leaked or at risk
2.7K
2,726
Downtime
Unknown
Timeline
- Detected 2023-12-21
- Disclosed 2024-02-06
- 47 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Data leak][Fraud]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, InagiPersonal services and entertainment2,726 leaked
Tokyo Verdy, Inc.
Sources
- [1][Official]「東京ヴェルディ公式オンラインストア」への不正アクセスによる個人情報漏洩に関するお詫びとお知らせTokyo Verdy · 2024-02-06