-
Tips for becoming a good boxer - November 6, 2020
-
7 expert tips for making your hens night a memorable one - November 6, 2020
-
5 reasons to host your Christmas party on a cruise boat - November 6, 2020
-
What to do when you’re charged with a crime - November 6, 2020
-
Should you get one or multiple dogs? Here’s all you need to know - November 3, 2020
-
A Guide: How to Build Your Very Own Magic Mirror - February 14, 2019
-
Our Top Inspirational Baseball Stars - November 24, 2018
-
Five Tech Tools That Will Help You Turn Your Blog into a Business - November 24, 2018
-
How to Indulge on Vacation without Expanding Your Waist - November 9, 2018
-
5 Strategies for Businesses to Appeal to Today’s Increasingly Mobile-Crazed Customers - November 9, 2018
Hello Kitty owner Sanrio says fan site security leak fixed
The data leak included their names, birthdays, email addresses and genders.
Advertisement
Vickery reported other fan portal sites were also affected, including hellokitty.com, hellokitty.com.sg, hellokitty.com.my, hellokitty.com.in.th, and momelody.com. It is also advisable for users to utilize the same logins and passwords in different websites, and, if possible, utilize a two-factor authentication to increase security for the account.
SanrioTown.com has not officially addressed allegations of the leak and has yet to respond to SCMagazine.com’s request for comment.
Citing researcher Chris Vickery, the USA firm’s report said hints for questions which users must answer to retrieve passwords for the website were also exposed. An automated email from the ISP confirmed that the incident notification was logged, but no further details are available. According to the blog, the earliest known date of exposure of the data was 22 November this year. He told us every time you enter information into a field on a Web page and click submit, that data is transmitted and stored, and could be exposed at some point in the future. But the leak of 3.3 million of their website’s registered users’ data isn’t so endearing.
The Hello Kitty brand is highly popular the world over, to kids and adults, so the immediate concern is that the database might contain the personal information of children.
He’s apparently finding all these MongoDB databases by doing searches using a tool called Shodan, a search engine for internet-connected devices. This is the website which is basically the online interactive community for the fans of Hello Kitty.
Advertisement
The data breach on Sanrio’s sites is the latest attack to target a company that caters to a young demographic. Sanrio declined to verify whether the data listed in the sample was from its database. The children’s identities and exact whereabouts could be exposed in the breach of VTech’s Learning Lodge app store, which is where VTech product owners can download apps, learning games, e-books and other educational content.