CoCo Ichibanya: unauthorized access to the catering inquiry form; 172 applicants' data became viewable outside
On 8 October 2024 Ichibanya (TSE Prime 7630), which runs the CoCo Ichibanya curry chain, announced that 172 customer records from the Kansai area entered into the catering inquiry form on its website had leaked. The server managing applicant data had been accessed without authorization, and the data was viewable in a particular person's cloud storage. Email addresses, phone numbers, names, company or group names, event names, dates, venues and more leaked; no secondary damage has been confirmed.
Disclosed
2024-10-08
Organizations involved
1
Leaked or at risk
172
172
Downtime
Unknown
Timeline
- Disclosed 2024-10-08
- 1 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Aichi, IchinomiyaAccommodation, food and drink172 leaked
Ichibanya Co., Ltd.
Sources
- [1][Official]お客様の個人情報の流出についてIchibanya · 2024-10-08
- [2][News]フォーム管理画面に第三者アクセス、顧客情報が流出 - 壱番屋Security NEXT · 2024-10-11