HAGS: unauthorized access to hags-ec.com; card data of 1,432 customers and member data may have leaked
According to ScanNetSecurity, HAGS announced on 2 July 2024 that personal data may have leaked through unauthorized access to its building materials shop "hags-ec.com". The Tokyo Metropolitan Police cybersecurity division told it of a possible card data leak on 16 January, and card payments were stopped on 26 January. A third-party investigation completed on 11 April found that the payment application had been tampered with through unauthorized access exploiting a weakness in the system. Card data of 1,432 buyers and member data of past registered customers may have leaked.
Disclosed
2024-07-02
Organizations involved
1
Leaked or at risk
1.4K
1,432
Downtime
Unknown
Timeline
- Detected 2024-01-16
- Disclosed 2024-07-02
- 168 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Tokyo, ShibuyaWholesale and retail trade1,432 leaked
HAGS Inc.
Sources
- [1][News]建材通販サイト「hags-ec.com」に不正アクセス、1,432 名のカード情報が漏えいした可能性ScanNetSecurity · 2024-07-10