JF Zengyoren: Gyogyoichi online shop breached; 11,844 card records may have leaked

The National Federation of Fisheries Co-operative Associations (JF Zengyoren) disclosed on 17 May 2024 that its online shop "JF Osakana Marché Gyogyoichi" had been accessed without authorization and personal data including credit card details may have leaked. On 14 May the Tokyo Metropolitan Police told it that part of the site's program had been altered, and it took the site down that day. Its findings of 19 August said attackers exploited a cross-site scripting vulnerability in the site-building service to plant malicious files and alter the payment application. Names, genders, birth dates, email addresses, addresses and phone numbers of 21,728 members, and card numbers, expiry dates and security codes of 11,844 customers who entered card details between 22 April 2021 and 14 May 2024, may have leaked.