> JapanHacked_
[Contained][Severity: Critical][Web app exploit]

Nagomi: unauthorized access to its online shop, and 16,407 card records leaked

Its online shop's payment application was tampered with, and 16,407 credit card records of about 15,000 people leaked.

Disclosed

2024-04-22

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The period covered by the leak began. [1]

  2. The period covered ended. [1]

  3. A card company notified it that card data was suspected to have leaked. [1]

  4. An external specialist investigation was completed. [1]

  5. It consulted the police. [1]

  6. It reported to the Personal Information Protection Commission. [1]

  7. It announced the case. [1] [2]

Impact

Tampering with the payment application leaked 16,407 credit card records of 15,274 people. The period covered is January 27, 2021 to May 15, 2023. [1]

Timeline

  1. Started 2021-01-27
  2. Disclosed 2024-04-22
  3. 1181 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card]

Organizations involved

Open in organization search

Sources

  1. [1][Official]弊社が運営する「味市春香なごみオンラインショップ」への不正アクセスによる個人情報漏えいに関するお詫びとお知らせNagomi Co., Ltd. · 2024-04-22
  2. [2][News]「味市春香なごみオンラインショップ」に不正アクセス、16,407件のカード情報が漏えいScanNetSecurity · 2024-05-01 08:05