JP Sanrio Digital Dec 2015 Hacking (Q15941)
From Open Risk Manual
A data breach risk event
| Language | Label | Description | Also known as |
|---|---|---|---|
| English | JP Sanrio Digital Dec 2015 Hacking |
A data breach risk event |
Statements
66C4F97C-4661-4AA3-A4D7-D72A0E2BC03E
December 2015
0 references
Sanrio Digital notifies that personal information belonging to members of the consumer website SanrioTown.com was publicly accessible owing to a security vulnerability. The vulnerability has been corrected and investigations are underway. To our knowledge at this time, no personal information of SanrioTown.com users was stolen or exposed. On December 19, it was revealed by security researcher Chris Vickery that personal information (such as names, date of birth, gender) belonging to SanrioTown.com members was accessible by someone who knew the IP addresses of specific vulnerable servers. The vulnerable data did not include credit card information or other payment information. Users passwords were accessible but remained securely encrypted with the cryptographic hash function SHA-1. Please (English)
1 reference
