Konaka: DIFFERENCE order data leaked
Abusive automated access to the order-detail download feature was detected at 08:53 on April 22 and blocked at 09:07. The company confirmed exposure of 150,491 customers' names, addresses, phone numbers and order details, then suspended related download features. Card numbers, email addresses and passwords were excluded. The May 9 update said additional safeguards, including removal of personal data from the download output, were implemented on May 8. Other servers showed no malicious traces and secondary harm was unconfirmed.
Disclosed
2025-04-24
Organizations involved
1
Leaked or at risk
150.5K
150,491
Downtime
Unknown
Timeline
- Detected 2025-04-22
- Disclosed 2025-04-24
- 2 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak][Service outage]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Kanagawa, Yokohama, TotsukaWholesale and retail trade150,491 leaked
Konaka Co., Ltd.
Sources
- [1][Official]不正プログラムによる、サービスの一部停止と個人情報漏洩に関するお知らせKonaka Co., Ltd. · 2025-04-24
- [2][Official]不正プログラムによるサービスの一部停止と個人情報漏洩の対応状況に関するお知らせKonaka · 2025-05-09