> JapanHacked_
[Contained][Severity: Major][Credential abuse]

MIXI: unauthorized logins to "mixi", and members' names and birth dates may have leaked

Unauthorized logins to "mixi" between February and March 2024 may have exposed members' names, genders, birth dates and email addresses.

Disclosed

2024-05-20

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The unauthorized logins began. They continued until March 16. [1]

  2. It announced the case, saying personal data may have leaked to third parties through the unauthorized logins. [1] [2]

Impact

The data that may have leaked is names, genders, birth dates and email addresses. The number of people was not stated. [1]

Timeline

  1. Started 2024-02-15
  2. Disclosed 2024-05-20
  3. 95 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak]
Entry point
Stolen credentials

Data exposed or at risk

[Name][Gender][Date of birth][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正ログインによる個人情報漏えいのおそれについてMIXI, Inc. · 2024-05-20
  2. [2][News]「mixi」に不正ログイン、個人データが第三者に漏えいしたおそれScanNetSecurity · 2024-05-24 08:05