> JapanHacked_
[Contained][Severity: Critical][Web app exploit]

Kashiwazaki Seika: card data exposed at its online shop

Payment-application tampering through a shop vulnerability potentially exposed 1,348 card records belonging to 1,198 customers. Card payments were suspended after a police warning on May 28, 2024. Affected purchases span April 5, 2021 to May 28, 2024; possible misuse of some cards was also identified.

Disclosed

2025-02-25

Organizations involved

1

Leaked or at risk

1.3K

1,348

Downtime

Unknown

Timeline

  1. Detected 2024-05-28
  2. Disclosed 2025-02-25
  3. 273 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Payment card][E-mail address][Passwords][Phone number]

Organizations involved

Open in organization search

Sources

  1. [1][Official]柏崎青果オンラインショップへの不正アクセスによる個人情報漏えいに関するお詫びとお知らせKashiwazaki Seika Ltd. · 2025-02-25