Shinko Shuppansha Keirinkan: SQL injection at Smart Lecture
A June 25 SQL-injection attack on the question-submission page potentially exposed member names, according to the July 14 notice. The page was closed and software fixed. Card information was excluded, no misuse had been identified at disclosure, and no affected count was published. The notice PDF identifies names, birth dates, email addresses and passwords, all encrypted, as the potentially exposed fields.
Disclosed
2025-07-14
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Detected 2025-06-25
- Disclosed 2025-07-14
- 19 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Osaka, Osaka, TennojiInformation and communications
Shinko Shuppansha Keirinkan Co., Ltd.
Sources
- [1][Official]不正アクセスによる個人情報漏えいのおそれのある事案の発生に関するお詫びとお知らせShinko Shuppansha Keirinkan Co., Ltd. · 2025-07-14
- [2][Official]不正アクセスによる個人情報漏えいのおそれのある事案の発生に関するお詫びとお知らせShinko Shuppansha Keirinkan · 2025-07-14