Uzabase: unauthorized access to an admin tool used by NewsPicks

On 8 October, Uzabase detected unauthorized access that exploited a vulnerability in an admin tool its NewsPicks news app uses for business. At most 323,000 emails, 59,000 names, 28,000 birth dates, 31,000 delivery addresses, 65,000 workplace details and 362,000 partial card records (cardholder names and the last 3 or 4 digits) may have leaked. Passwords and full card numbers were not included. Uzabase cut off access to the tool and reissued access keys. The disclosed fields also include about 29,000 workplace phone numbers.