Wired
On December 6, LINE Pay apologized for the fact that information related to some users’ participation in the campaign had been available on GitHub for about two months.
Information such as credit card number and bank account is not included
According to LINE Pay, some users will participate in the campaign on the software development platform “GitHub” from around 3:13 pm on September 12, 2021 to 6:45 pm on November 24. It was said that the related information could be viewed.
The total number of target accounts is 133,484, of which 51,543 are for users in Japan.
The breakdown of the leaked information is the target user’s identifier (different from LINE ID), member store management number, campaign information (campaign name, payment amount, payment date and time), and the period of the information is from December 26, 2020. It is April 2, 2021. Name, address, phone number, email address, credit card number, bank account, etc. are not included.
It seems that there were 11 accesses to the information during the viewable period, but it is said that no impact on users has been confirmed at this time. In addition, the information has already been deleted, and it does not remain on search engines or archive sites.
Notifications will be sent to the relevant users around 4:00 pm on December 6th.
About the cause and background of the information leakage
According to LINE Pay, in order for employees of the company’s group companies to investigate the omission of points granted on September 12, 2021, the program and target payment information will be uploaded to GitHub without permission. The cause is that it has been closed.
LINE Pay detected the information on “GitHub” through internal monitoring work at 6:27 pm on November 24, and deleted it at 6:45 pm on the same day.
Source: LINE Pay
(kotobaya)
Source: iPhone Mania