LY Corp: a LINE Album defect showed thumbnails of other users' album images, affecting over 120,000 users in Japan
A flaw in the LINE Album thumbnail system showed other users' image thumbnails. In Japan an estimated 70,000 had their thumbnails shown to others and 55,000 saw others'.
Disclosed
2024-11-29
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It began rolling out the system update that contained the cause of the defect. [1]
The defect occurred as traffic grew with the rollout of the update. [1]
It detected the defect internally. [1]
It fixed the system so that no new defects would occur. [1]
It announced the case. From 06:00 it began rolling out a fix to clear the device cache for users who kept seeing wrong thumbnails. [1] [2] [3]
The fix that removes the wrong thumbnails reached all users. [1]
It began notifying users in Japan who may have been affected through LINE. [1]
Impact
When processing that turns compressed album images into thumbnails peaked, image data was mixed during conversion. The original images in albums and images outside albums were not affected. Wrong thumbnails appeared in 0.3% or less of the images and accesses concerned. No logs remain, so the numbers are estimates: about 70,000 users in Japan (about 135,000 including overseas) had their thumbnails shown in others' albums, and about 55,000 in Japan (about 114,000) saw others' thumbnails. [1]
Timeline
- Started, Detected 2024-11-28
- Disclosed 2024-11-29
- 1 days
Attack or cause
- Method
- [Misconfiguration]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Critical]Tokyo, ChiyodaInformation and communications135,000 leaked
LY CorporationAn estimated 135,000 users worldwide had their thumbnails shown in other users' albums.
Sources
- [1][Official]LINEアプリのアルバム機能における不具合のお知らせとお詫びLY Corporation · 2024-12-12
- [2][News]LINEのアルバムで不具合 サムネイルに他の利用者の写真Nikkei · 2024-11-29
- [3][News]LINEアプリのアルバム機能に不具合、他のユーザーの画像のサムネイル表示ScanNetSecurity · 2024-12-05 08:05