Shueisha: unauthorized access to the HAPPY PLUS COMMUNITY blogger system

Shueisha's HAPPY PLUS COMMUNITY system, used to manage and contact bloggers working with its fashion magazines, was accessed twice on 9 September. Attackers went after API credentials exposed by a misconfiguration of the CMS it uses, created a privileged user account and sent repeated API requests. Names, emails, addresses, phone numbers, birth dates, genders, occupations and more of 2,835 registered bloggers leaked, along with 630 job records, 11,237 sent emails and a list of 10,780 business partners. Emails sent to 100 people using the system's templates led a recipient to report it.