ENKR

Comic C'moA (NTT Solmare) member data breach

Add to my breach check

Made public · 4,200,000 records at most in system log files

What leaked5

Replaceable

  • Password

Hard to replace

  • Email address
  • Other profile data

Permanent

  • Date of birth
  • Gender
  • Passwordhashed passwords, 319 member-database records only; the log files held no passwords
  • Other profile datanickname

To-dos3 · about 1 h in all

  1. Change the leaked password everywhere you reused itabout 30 minfreeStops: account takeover
  2. Turn on two-step sign-in for email and bankingabout 15 minfreeLimits harm from: account takeover
  3. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: account takeover

What happened next6 events

  1. UndetectedNone on record
  2. Response 6 eventsNo individual notice on record · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record
  1. 4th report: 319 member-database records and up to about 4.2 million log-file records leaked
  2. Published a third report on the Comic C'moA breach
  3. Confirmed that member data in the member-management system had leaked
  4. Announced emergency maintenance after likely unauthorised access · 1st report
  5. Judged unauthorised access likely and stopped the Comic C'moA service
  6. Judged that unauthorised outside access to the Comic C'moA servers was likely
Company
Comic C'moA
Company detected it
Made public
Notice
Leak confirmed
Affected
4,200,000 records at most in system log files · may include duplicates of one customer, plus 319 member-database records · 4th report

How the facts developed

  1. 4th report: 319 member-database records and up to about 4.2 million log-file records; no passwords in the logs
  2. 3rd report: some system log files were also viewed and taken
  3. 2nd report: member data confirmed leaked (email, hashed password, date of birth, gender, nickname); count under review

Sources