Joyful Honda: card data (3,958 records) and personal data of 20,132 customers may have leaked from its THE GLOBE·OLD FRIEND shop
Home centre chain Joyful Honda announced on 16 May 2024 that its "THE GLOBE·OLD FRIEND online shop" had been accessed without authorization and that personal data of 20,132 customers, including 3,958 card records, may have leaked. According to Netshop Tantousha Forum, a security check on 18 January found the leak concern and card payments were stopped that day; on the 22nd the server was disconnected and the site closed. Through unauthorized access exploiting a weakness in the system, malicious files were planted and files altered so that card data was stored. Card holder names, numbers, expiry dates, security codes and email addresses from 17 March 2021 to 18 January 2024, names, addresses, phone numbers, email addresses, purchase histories and more of users from 27 October 2012 to 22 January 2024, and login IDs and passwords are affected.
Disclosed
2024-05-16
Organizations involved
1
Leaked or at risk
20.1K
20,132
Downtime
Unknown
Timeline
- Detected 2024-01-18
- Disclosed 2024-05-16
- 119 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Ibaraki, TsuchiuraWholesale and retail trade20,132 leaked
Joyful Honda Co., Ltd.
Sources
- [1][Official]「THE GLOBE・OLD FRIENDオンラインショップ」への不正アクセスによる個人情報漏えいに関するご質問についてJoyful Honda
- [2][News]ジョイフル本田のECサイトに不正アクセス、セキュリティコード含むカード情報約4000件が漏えいの可能性Netshop Tantosha Forum