> JapanHacked_
[Contained][Severity: Critical][Web app exploit]

INTENSE: unauthorized access to its "fofo" online shop, and 15,198 card records leaked

Its salon-supply online shop "fofo" was accessed without authorization and 15,198 credit card records leaked. Card payments were stopped in April 2023.

Disclosed

2024-05-20

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The period covered by the leak began. [1]

  2. It stopped card payments. [1]

  3. A card company notified it that card data was suspected to have leaked. [1]

  4. It reported to the Personal Information Protection Commission. [1]

  5. It consulted the police. [1]

  6. An external specialist investigation was completed. [1]

  7. It announced the case. [1] [2]

Impact

Attackers exploited a weakness in the site and placed a malicious script (WebShell) on the web server. For customers who bought on the site from December 24, 2020 to December 8, 2023, card numbers, expiry dates, security codes, member names and login data may have been stored in plain text. 15,198 card records leaked. [2] [3]

Timeline

  1. Started 2020-12-24
  2. Disclosed 2024-05-20
  3. 1243 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][Name][Passwords]

Organizations involved

Open in organization search

Sources

  1. [1][Official]弊社が運営するショップサイト「fofo」への不正アクセスによる個人情報漏えいに関するお詫びとお知らせINTENSE Co., Ltd. · 2024-05-20
  2. [2][News]クレカ情報1.5万件、平文で流出か　美容室向けECサイト「fofo」に不正アクセスITmedia NEWS · 2024-05-20
  3. [3][News]インテンス運営「fofo」に不正アクセス、15,198 件のカード情報が漏えいScanNetSecurity · 2024-05-27 08:05