Supply chain β›“ Supply Chain

Mangatoon Third-Party Breach (May 2022)

πŸ“… 2022-05-01 🏒 Elasticsearch
Primary Source β†—

Incident Details

Mangatoon data breach exposes data from 23 million accounts. Manga comic reading app Mangatoon has suffered a data breach that exposed the account information of 23 million users after a hacker stole it from an Elasticsearch database. Comic reading platform Mangatoon has suffered a data breach that exposed information belonging to 23 million user accounts after a hacker stole it from an unsecured Elasticsearch database. Mangatoon is also a very popular iOS and Android app used by millions of users to read online Manga comics. Third-party company: Elasticsearch.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Elasticsearch
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2022-05-01 Breach occurred
  2. 2022-07-09 Publicly disclosed