Jupiter Shop Channel: unauthorized logins to its online store accessed about 15,000 accounts, possibly exposing names and addresses
Unauthorized logins to its online store accessed about 15,000 customer accounts, possibly exposing names, addresses and partial card data.
Disclosed
2024-11-19
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It confirmed suspicious access to its online store. [1]
It announced the case. As of 10:00 that day it had confirmed access to customer information through about 15,000 unauthorized logins. It reset the passwords of the affected accounts and said it would contact those customers individually to ask them to set a new one. It also reported to the Personal Information Protection Commission and other bodies. [1] [2]
Impact
Names, addresses, phone numbers, email addresses and birth dates (month and day only) may have been viewed. For customers who had registered a card, the last four digits and expiry date may also have been viewed. The full card number and security code are not held in its systems and were not viewed. It said no impersonation purchases had been confirmed. [1]
Timeline
- Detected 2024-11-15
- Disclosed 2024-11-19
- 4 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Data leak]
- Entry point
- Stolen credentials
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, KotoWholesale and retail trade15,000 leaked
Jupiter Shop Channel Co., Ltd.
Sources
- [1][Official]当社Webサイトへの不正ログイン発生のお詫びとお知らせJupiter Shop Channel Co., Ltd. · 2024-11-19
- [2][News]「ショップチャンネル」に不正ログイン、約 15,000 件の個人情報が閲覧された可能性ScanNetSecurity · 2024-11-27 08:05