> JapanHacked_
[Contained][Severity: Critical][Web app exploit]

Nagasaki Prefecture Products Promotion Association: card data of 18,746 customers leaked from its e-Nagasaki.com shop

The Nagasaki Prefecture Products Promotion Association disclosed by 24 May 2024 that part of the program of its online shop "e-Nagasaki.com" had been altered through unauthorized access and that card and other data may have leaked (the shop notice followed on 26 May). According to NCC Nagasaki Culture Telecasting, Nagasaki police told it about the alteration on 21 May and the site was stopped from the 22nd. About 60,400 members were first said to be possibly affected. Its announcement of 7 August said card data of 18,746 customers had leaked.

Disclosed

2024-05-24

Organizations involved

1

Leaked or at risk

60.4K

60,400

Downtime

Unknown

Timeline

  1. Detected 2024-05-21
  2. Disclosed 2024-05-24
  3. 3 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Name][Postal address][Phone number][Payment card]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]「ｅ-ながさきどっとこむ」に不正アクセス、18,746 名分のカード情報漏えいScanNetSecurity · 2024-08-20
  2. [2][News]最大約６万人か…県物産振興協会の通販サイト｢ｅーながさきどっとこむ｣情報漏洩の恐れNCC Nagasaki Culture Telecasting · 2024-05-24