started · updated
Rakuten Mobile reports potential exposure of user payment certificates
Rakuten Mobile has notified users that a vulnerability in its ‘my Rakuten Mobile’ service may have allowed third parties to view payment certificates. The issue was discovered during a vulnerability diagnostic test.
Potential exposure included personal details such as names, addresses, phone numbers, data usage, and billing amounts. However, the company stated that sensitive financial information, including credit card details, and call histories were not included in the affected documents.
Rakuten Mobile completed system repairs to address the vulnerability on June 20. Following an investigation of available records, the company reported that no unauthorized access or secondary damage has been confirmed to date. The company has notified relevant authorities and is urging customers to be cautious of suspicious communications impersonating the brand.
Entities
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 3 SOURCES] No evidence of unauthorized access or secondary damage has been confirmed through investigations of available records. ascii.jp · orefolder.jp · japan.cnet.com
- [● 3 SOURCES] System repairs and countermeasures were completed by June 20. ascii.jp · orefolder.jp · japan.cnet.com
- [● 3 SOURCES] Exposed information included names, addresses, phone numbers, data usage, and usage fees. ascii.jp · orefolder.jp · japan.cnet.com
- [● 3 SOURCES] Financial information, including credit card details and call history, was not part of the potentially exposed data. ascii.jp · orefolder.jp · japan.cnet.com
- [● 3 SOURCES] Rakuten Mobile identified a vulnerability where third parties could view payment certificates using specific programs and intentional special operations. ascii.jp · orefolder.jp · japan.cnet.com