Unauthorised logins confirmed on 6,127 BookLive accounts in Japan
The Japanese e-book service BookLive confirmed unauthorised logins to 6,127 accounts through credential stuffing using email addresses and passwords obtained from external sources. Users’ My Page sections and the first page of their bookshelves may have been viewed. The company terminated sessions, forcibly logged users out and made two-factor authentication compulsory for email login.
Key facts
- Affected organisation
- BookLive
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Unauthorised logins to 6,127 accounts and possible viewing of My Page sections and parts of users’ bookshelves
- Cause / method
- Credential stuffing using email addresses and passwords obtained from external sources
- Location
- Japan
Timeline
- Suspicious logins to 6,127 BookLive accounts, session termination and compulsory two-factor authentication for email login were reported.
- It was reported that My Page sections and the first page of users’ bookshelves may have been viewed through unauthorised logins.
2 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.