> JapanHacked_
[Contained][Severity: Critical][Intrusion]

Konaka: DIFFERENCE order data leaked

Abusive automated access to the order-detail download feature was detected at 08:53 on April 22 and blocked at 09:07. The company confirmed exposure of 150,491 customers' names, addresses, phone numbers and order details, then suspended related download features. Card numbers, email addresses and passwords were excluded. The May 9 update said additional safeguards, including removal of personal data from the download output, were implemented on May 8. Other servers showed no malicious traces and secondary harm was unconfirmed.

Disclosed

2025-04-24

Organizations involved

1

Leaked or at risk

150.5K

150,491

Downtime

Unknown

Timeline

  1. Detected 2025-04-22
  2. Disclosed 2025-04-24
  3. 2 days

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正プログラムによる、サービスの一部停止と個人情報漏洩に関するお知らせKonaka Co., Ltd. · 2025-04-24
  2. [2][Official]不正プログラムによるサービスの一部停止と個人情報漏洩の対応状況に関するお知らせKonaka · 2025-05-09