> JapanHacked_
[Contained][Severity: Critical][Web app exploit]

Shinko Shuppansha Keirinkan: SQL injection at Smart Lecture

A June 25 SQL-injection attack on the question-submission page potentially exposed member names, according to the July 14 notice. The page was closed and software fixed. Card information was excluded, no misuse had been identified at disclosure, and no affected count was published. The notice PDF identifies names, birth dates, email addresses and passwords, all encrypted, as the potentially exposed fields.

Disclosed

2025-07-14

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

Timeline

  1. Detected 2025-06-25
  2. Disclosed 2025-07-14
  3. 19 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Name][Date of birth][E-mail address][Passwords]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによる個人情報漏えいのおそれのある事案の発生に関するお詫びとお知らせShinko Shuppansha Keirinkan Co., Ltd. · 2025-07-14
  2. [2][Official]不正アクセスによる個人情報漏えいのおそれのある事案の発生に関するお詫びとお知らせShinko Shuppansha Keirinkan · 2025-07-14