Genkai Town: SQL injection attack on its hometown tax donation site leaked email addresses and other data of 413,867 people

It revised the recipe page that introduces dishes made with return gifts. A weak spot that accepted SQL injection entered the program at this time. [2]

The site and its related management system became slow to operate, and checking found unauthorized access from outside. The same day it fixed the vulnerability and blocked the attacker, and took the site offline. [1]

It announced the case, saying donors' information had been accessed without authorization, and that it was consulting the Saga prefectural police and the Personal Information Protection Commission. [1] [3]

It said all investigations were complete and announced that user information such as email addresses of 413,867 people had leaked. Login passwords were encrypted, but it recommended changing them as a precaution. [2]