SHINDO4

DIFFERENCE

Konaka Co., Ltd.

DIFFERENCE order customers150,491people

LEAK CONFIRMEDPostal address / Phone numberUnauthorized access · Contained

Open in the live monitor ▶
Disclosed
Apr 24, 2025
Detected
Apr 22, 2025 08:53 JST
Detection to disclosure
2 days
Leak
Leak confirmed
Type
Unauthorized access
Status
Contained
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityFull name
ContactAddress, Phone number
Transactions & activityOrder details: order date, store, product name, amount, payment method, scheduled shipping date, etc.

How many

  • DIFFERENCE order customers 150,491 people

Who is affected

  • DIFFERENCE order customers

Cause

The server for DIFFERENCE's order details download service received a large volume of automated, program-driven access from outside

Timeline

  1. Detected
  2. Contained
  3. Date of the Security NEXT report

Response

  • Blocked the entry point

What you should do

  1. Treat refund or apology calls and texts as scams. Call back only on the number from the official site
  2. Watch for unexpected mail or invoices; your address is hard to change
  3. Check the company's notice to see if you're affected

Lessons for companies

  1. Check authorization on every API call and detect and stop bulk pulls
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources