August intrusion at Shimane no Furusato Chokusobin may have exposed seven people’s card details
On November 2, Shimane Prefecture announced that an intrusion exploiting a vulnerability in the Amazon Pay plugin had occurred at Shimane no Furusato Chokusobin on August 13, 2026. The attacker created an unauthorized administrator account and planted a file that read payment information entered by users, potentially exposing the card details of seven people who went through the payment process from August 13 to 15. The operator deleted the unauthorized account, disabled the plugin, restored files, and notified those affected on October 23. As of November 1, no fraudulent card use had been confirmed for the six people who completed purchases.
Key facts
- Affected organization
- Shimane no Furusato Chokusobin
- Incident type
- Hacking & intrusion
- Occurred / detected
- 2026-08-13
- Scale of damage
- Possible exposure of seven people’s credit card numbers, expiration dates, cardholder names, security codes, and payment methods (six of whom completed purchases)
- Cause / method
- Exploitation of a vulnerability in the Amazon Pay plugin
- Location
- Japan
Timeline
- It was revealed that unauthorized access exploiting a vulnerability in the Amazon Pay plugin had occurred at Shimane no Furusato Chokusobin.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.