Supply chain
β Supply Chain
Mangatoon Third-Party Breach (May 2022)
Primary Source βIncident Details
Mangatoon data breach exposes data from 23 million accounts. Manga comic reading app Mangatoon has suffered a data breach that exposed the account information of 23 million users after a hacker stole it from an Elasticsearch database. Comic reading platform Mangatoon has suffered a data breach that exposed information belonging to 23 million user accounts after a hacker stole it from an unsecured Elasticsearch database. Mangatoon is also a very popular iOS and Android app used by millions of users to read online Manga comics. Third-party company: Elasticsearch.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Elasticsearch
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2022-05-01 Breach occurred
- 2022-07-09 Publicly disclosed