Fujisan Magazine Service: login abuse at Fujisan.co.jp; addresses may have been exposed

Heavy abusive access was detected from May 31. Compromised My Page sessions were used to access other customers' address-book pages, potentially exposing address information for up to 2,528,491 people. The initial nine compromised users were corrected to eight on June 25. Access restrictions and fixes were applied; payment information was excluded. The August 15 completed investigation reduced possible exposure to 2,259,434 people. Actual leakage could not be precisely established, so accessible records were treated as potentially exposed; payment information and passwords were excluded.