> JapanHacked_
[Contained][Severity: Critical][Intrusion]

Biophilia: unauthorized access to its cloud server; data of about 200,000 accounts taken

Biophilia, which sells the pet foods "CocoGourmet" and "MyaoGourmet" by mail order, announced on 13 May 2024 that a server managing its online services had been accessed without authorization and that some customer data had leaked. According to ScanNetSecurity, it was found at about 18:00 on 3 May when unusual activity was detected on a file server of its cloud provider. According to ITmedia NEWS, data of 198,200 accounts that bought between 13 January 2022 and 3 May 2024 is affected: for 163,474 accounts names, addresses and phone numbers, and for 34,726 also email addresses, birth dates, gender and passwords may have leaked. The data was not encrypted. According to Security NEXT, the data was downloaded and some of it deleted. Up to 28,237 uploaded images, such as pet photos, may also have leaked.

Disclosed

2024-05-13

Organizations involved

1

Leaked or at risk

198.2K

198,200

Downtime

Unknown

Timeline

  1. Detected 2024-05-03
  2. Disclosed 2024-05-13
  3. 10 days

Organizations involved

Open in organization search

Sources

  1. [1][News]約20万アカウントの情報漏えいか 平文パスワードも ペットベンチャーに不正アクセスITmedia NEWS · 2024-05-16
  2. [2][News]ペットフード通販サイトの顧客情報が窃取被害 - 一部データの消去もSecurity NEXT
  3. [3][News]ペットフード取り扱いバイオフィリアに不正アクセス、顧客の個人情報が外部にダウンロードScanNetSecurity · 2024-05-21