> JapanHacked_
[Contained][Severity: Critical][Web app exploit]

Skylark: takeaway site intrusion

Unauthorized access was identified and the site closed on May 7, with disclosure the next day. July's findings identified potential exposure of card and personal information for 2,270 people who registered new cards between April 30 and May 7. A vulnerability was exploited; affected fields included names, birth dates, contacts, card numbers and security codes.

Disclosed

2025-05-08

Organizations involved

1

Leaked or at risk

2.3K

2,270

Downtime

Unknown

Timeline

  1. Detected 2025-05-07
  2. Disclosed 2025-05-08
  3. 1 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak][Service outage]
Entry point
Web app

Data exposed or at risk

[Name][Gender][Date of birth][Phone number][E-mail address][Payment card]

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社テイクアウトサイトへの不正アクセス発生についてSkylark Holdings Co., Ltd. · 2025-05-08
  2. [2][Official]テイクアウトサイトへの不正アクセスによる個人情報漏えいの可能性に関するお詫びと調査結果に関するお知らせSkylark Holdings Co., Ltd. · 2025-07-30