> JapanHacked_
[Contained][Severity: Major][Credential abuse]

Oisix ra daichi: impersonation logins to Oisix.com may have exposed names, addresses and more of about 97,533 IDs

Impersonation logins with IDs and passwords obtained elsewhere ran for two days, and names, addresses and order history of about 97,533 IDs may have been viewed.

Disclosed

2024-11-26

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Its system detected impersonation logins. Unauthorized access took place on this day and on November 25. [1]

  2. It reset the passwords of the affected IDs. [1]

  3. It announced the case. As of 09:00 on November 26, about 97,533 IDs may have been logged into by impersonators. It said a web application firewall was in place but did not stop the attack, and that it took server-side measures after detection. [1] [2] [3]

Impact

What may have been viewed is names, addresses, phone numbers and email addresses of customers and delivery recipients, and reservation and purchase history. Card numbers are held by a payment processor and could not be viewed. Sensitive personal data of Healthcare Oisix users was not leaked. [1]

Timeline

  1. Started, Detected 2024-11-24
  2. Disclosed 2024-11-26
  3. 2 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak]
Entry point
Stolen credentials

Data exposed or at risk

[Name][Postal address][Phone number][E-mail address][Purchase history]

Organizations involved

Open in organization search

Sources

  1. [1][Official]【重要】当社WEBサイトへの「なりすましログイン」への対応に関してOisix ra daichi Inc. · 2024-11-26
  2. [2][News]「Oisix.com」に不正ログイン10万件　WAF導入も、パスワードリスト攻撃防げずITmedia NEWS · 2024-11-27
  3. [3][News]有機野菜販売の「Oisix.com」になりすましログインScanNetSecurity · 2024-12-06 08:05