> JapanHacked_
[Contained][Severity: Major][Credential abuse]

Isetan Mitsukoshi: impersonation logins to ISETAN DOOR may have exposed names, addresses and more of 11,073 accounts

Logins with IDs and passwords leaked elsewhere hit ISETAN DOOR, and names, addresses and order history of 11,073 accounts may have been viewed.

Disclosed

2024-11-26

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. From about this time until about 22:00 on November 25, logins with IDs and passwords obtained elsewhere continued. [2] [3]

  2. The company noticed the impersonation logins at about this time. [3]

  3. It announced the case. It emailed the affected customers and reset their passwords. It said it would strengthen server-side defenses and introduce the reCAPTCHA login protection. [1] [2] [3]

Impact

What may have been viewed is names, addresses, phone numbers, email addresses and purchase history of 11,073 accounts. Card data is held by a payment processor and was reported as not affected. A web application firewall was in place but did not stop the attack. [2]

Timeline

  1. Started 2024-11-24
  2. Detected 2024-11-25
  3. Disclosed 2024-11-26
  4. 2 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak]
Entry point
Stolen credentials

Data exposed or at risk

[Name][Postal address][Phone number][E-mail address][Purchase history]

Organizations involved

Open in organization search

Sources

  1. [1][Official]ご利用ガイド | ISETAN DOORIsetan Mitsukoshi Ltd.
  2. [2][News]【三越伊勢丹】11,073件分のアカウント情報窃取か　外部からのリスト型攻撃Cybersecurity Research Institute · 2024-12-06
  3. [3][News]ISETAN DOOR になりすましログイン、11,073 件のアカウントが参照された可能性ScanNetSecurity · 2024-12-06 08:05