> JapanHacked_
[Contained][Severity: Major][Credential abuse]

Jupiter Shop Channel: unauthorized logins to its online store accessed about 15,000 accounts, possibly exposing names and addresses

Unauthorized logins to its online store accessed about 15,000 customer accounts, possibly exposing names, addresses and partial card data.

Disclosed

2024-11-19

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It confirmed suspicious access to its online store. [1]

  2. It announced the case. As of 10:00 that day it had confirmed access to customer information through about 15,000 unauthorized logins. It reset the passwords of the affected accounts and said it would contact those customers individually to ask them to set a new one. It also reported to the Personal Information Protection Commission and other bodies. [1] [2]

Impact

Names, addresses, phone numbers, email addresses and birth dates (month and day only) may have been viewed. For customers who had registered a card, the last four digits and expiry date may also have been viewed. The full card number and security code are not held in its systems and were not viewed. It said no impersonation purchases had been confirmed. [1]

Timeline

  1. Detected 2024-11-15
  2. Disclosed 2024-11-19
  3. 4 days

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社Webサイトへの不正ログイン発生のお詫びとお知らせJupiter Shop Channel Co., Ltd. · 2024-11-19
  2. [2][News]「ショップチャンネル」に不正ログイン、約 15,000 件の個人情報が閲覧された可能性ScanNetSecurity · 2024-11-27 08:05