Science & Tech · Cybersecurity · 3 hrs ago
Data from more than 160,000 7NOW users exposed in cyberattack
A cyberattack on PickGo exposed data from more than 160,000 7NOW users in Japan.
PickGo, run by delivery contractor CBcloud, handles some deliveries for Seven-Eleven Japan’s 7NOW service and is used by many companies.
The exposed 7NOW data included names, and in some cases addresses, phone numbers and order details.
About 800 Demae-can customers were also affected, with some names, addresses, phone numbers and order information exposed.
Credit card details and account passwords were not leaked, and 7NOW continued operating normally.
CBcloud blocked the attack, stopped affected accounts and fixed the software flaw; it also restricted some functions and access from outside Japan.
Demae-can temporarily stopped its connection to PickGo, then restarted it after repairs and checks.
More than 160,000 7NOW users’ information was obtained in a cyberattack on PickGo, a delivery platform used by 7NOW.
Seven-Eleven Japan said 164,180 customers’ names in kana were exposed.
The information was accessed through CBcloud, which handles some 7NOW delivery work and operates PickGo.
Some records also included addresses, phone numbers, postal codes and order details.
Seven-Eleven said credit card information and account IDs and passwords were not exposed, and 7NOW continued operating.
- Who
- Customers of 7NOW and Demae-can were affected.
- What
- Personal information was obtained in an unauthorized access incident involving PickGo.
- When
- The access was discovered on November 1; Seven-Eleven Japan and Demae-can announced the data exposure on November 3.
- Where
- The incident involved PickGo, a platform operated by CBcloud in Japan.
- Why
- The sources say an unauthorized access incident occurred, but do not state its cause.
This story does not have two clearly opposing sides.
CBcloud discovered the unauthorized access while investigating.
Demae-can stopped its connection with CBcloud.
Demae-can resumed the connection after fixing a flaw and checking communications.
Seven-Eleven Japan and Demae-can announced that customer information had been obtained.
- 7NOW names exposed
- 164,180
- 7NOW name-and-address records
- 4,762
- 7NOW name, address, phone and postal-code records
- 209
- Demae-can customer names
- 799
- Demae-can customer addresses
- 794