> JapanHacked_
[Contained][Severity: Major][Misconfiguration]

Hanshin Tigers: email addresses of "Toratere" prize campaign entrants were left viewable

A cloud misconfiguration at a contractor left email addresses and other data of 8,452 entries to "Toratere" video service campaigns viewable.

Disclosed

2024-05-17

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The entry data became viewable. [1]

  2. It found that the data was viewable. [1]

  3. It announced the case, saying data it had entrusted to contractor YTE had become viewable through a cloud environment misconfiguration. [1] [2]

Impact

Those affected entered four prize campaigns, in October 2019, March 2021, October 2022 and October 2023. Entry times, email addresses, genders, age groups, prefectures, requests and the OS and browser used, 8,452 records in all, may have leaked. Names, addresses, contact details and card numbers were not held. [1]

Timeline

  1. Started 2021-04-01
  2. Detected 2024-05-14
  3. Disclosed 2024-05-17
  4. 1142 days

Attack or cause

Method
[Misconfiguration]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[E-mail address][Gender]

Organizations involved

Open in organization search

Sources

  1. [1][Official]お客様のメールアドレス等の漏えい可能性に関するお知らせとお詫びについてHanshin Tigers Baseball Club · 2024-05-17
  2. [2][News]阪神タイガース公式動画配信「虎テレ」プレゼントキャンペーン応募者のメールアドレス等が閲覧可能な状態にScanNetSecurity · 2024-05-24 08:05