> JapanHacked_
[Contained][Severity: Critical][Web app exploit]

HAGS: unauthorized access to hags-ec.com; card data of 1,432 customers and member data may have leaked

According to ScanNetSecurity, HAGS announced on 2 July 2024 that personal data may have leaked through unauthorized access to its building materials shop "hags-ec.com". The Tokyo Metropolitan Police cybersecurity division told it of a possible card data leak on 16 January, and card payments were stopped on 26 January. A third-party investigation completed on 11 April found that the payment application had been tampered with through unauthorized access exploiting a weakness in the system. Card data of 1,432 buyers and member data of past registered customers may have leaked.

Disclosed

2024-07-02

Organizations involved

1

Leaked or at risk

1.4K

1,432

Downtime

Unknown

Timeline

  1. Detected 2024-01-16
  2. Disclosed 2024-07-02
  3. 168 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]建材通販サイト「hags-ec.com」に不正アクセス、1,432 名のカード情報が漏えいした可能性ScanNetSecurity · 2024-07-10