Topic
IncidentsUpdated
Japanese convenience store chain Lawson says attackers took names, birth dates and some addresses tied to 2.15 million Lawson ID accounts in September via its app. It later corrected its notice: email addresses did not leak.
ThreatsUpdated
Japan's national CERT describes the attacks behind the breach wave: known-flaw scanning, internal API abuse, a Metabase bug, web shells and AI penetration testing tools such as ARTEX and Cairn, with attacker IPs.
IncidentsUpdated
Attackers took member numbers, names, emails and phone numbers of almost every user of the Yakiniku King restaurant app in Japan: 10,788,963 accounts.
IncidentsUpdated
Hokkaido convenience store chain Seicomart says an attacker reached its member database through its app server and viewed data on 574,647 members.