Kitty News Blog
(http://blog.hellokitty.com/kitty_news)
Sanriotown News

Update to security advisory from December 22, 2015

January 14, 2017
Sanrio Digital

  

  

Sanrio Digital recently received evidence that a 2015 data breach of the SanrioTown web site involved some user data theft. Please note that this is an update about the 2015 incident, and not an existing vulnerability.

On December 22, 2015, Sanrio Digital issued a security advisory stating that personal information belonging to members of the consumer website SanrioTown.com was made publicly accessible by a security vulnerability. The vulnerability was corrected and SanrioTown users were notified of the problem (see:  http://sanriodigital.com/story/security-advisory).

At the time, we had no evidence of data theft, however we have now learned from reporter Steve Ragan of CSO Online that personal information of SanrioTown.com users was stolen during the 2015 data breach. According to Mr Ragan, a database containing information of 3,345,168 SanrioTown users has been circulating since the time of the incident. He received the sample records from LeakedSource containing information of 30 SanrioTown users. We have verified that these sample records appear to be real. We cannot, however, relate the source of such sample records to the 2015 data breach and we are unable to verify whether the database of LeakedSource contains information of 3,345,168 SanrioTown users stolen during the 2015 SanrioTown data breach.

These stolen data do not include credit card information or other payment information. Users’ passwords are encrypted with the cryptographic hash function SHA-1.

Membership data of SanrioTown are not shared with other Sanrio services or websites (such as Sanrio.com), therefore other Sanrio services were not affected.

Starting on December 22, 2015, SanrioTown and Sanrio Digital notified users about the incident, advising them to change their passwords. Media were also notified.

 Detailed Information of the 2015 data breach

1.    Personal user information stolen:

First and last name

Birthday (encoded)

Gender

Country

Email address

Password (encrypted using SHA-1 hashes)

Password hint questions

2.    Number of users affected

Potentially 3,345,168 SanrioTown accounts as reported by Steve Ragan, based on information provided by LeakedSource.

3.    Circumstances

Owing to server misconfiguration, some personal information of SanrioTown.com members was visible to people actively seeking it.

 4.    Response

The vulnerability was corrected and SanrioTown users were notified starting on December 22, 2015. Sanrio Digital advised SanrioTown users to change their passwords on SanrioTown as well as passwords on other online services and accounts if they used similar passwords or hint questions.

5.    Preventive measures

Sanrio Digital installed additional security mechanisms on SanrioTown servers and instituted additional periodic security reviews.

6.    Contact

General inquiries:

Please contact Sanrio Digital at info@sanriodigital.com

Media inquiries only:

Mark Leeper (on behalf of Sanrio Digital)

Matrix Communications Limited

email: mark@matrixcom.org

Tel: +852 9142-1510

30 Responses to “Update to security advisory from December 22, 2015”

  1. WWE Roman Reigns Jacket Says:

    I have notice after reading your blog that its simply like tremendous blog as well. I am here for the first time and i have also book marked your site. You guys doing well job and keep it up.

  2. tinder dating site free Says:

    Greetings from California! I’m bored at work so I decided to check out
    your website on my iphone during lunch break.
    I really like the knowledge you present here and
    can’t wait to take a look when I get home. I’m amazed at how quick your blog loaded on my phone ..
    I’m not even using WIFI, just 3G .. Anyhow, very good site!

  3. tinder dating site Says:

    I would like to thank you for the efforts you have
    put in penning this blog. I really hope to check out the same high-grade content from you in the future as well.
    In fact, your creative writing abilities has motivated me to get my own website now ;)

  4. minecraft Says:

    After looking into a few of the articles on your web page, I truly appreciate your way of blogging.
    I bookmarked it to my bookmark webpage list and will be checking
    back soon. Take a look at my web site as well and tell me what you think.

  5. minecraft Says:

    I know this website offers quality based content and other data,
    is there any other web page which gives these kinds of data in quality?

  6. tinder dating site free search Says:

    Hello! I realize this is sort of off-topic however I
    needed to ask. Does building a well-established blog like yours take a
    large amount of work? I’m brand new to running a blog
    but I do write in my journal daily. I’d like to start a blog so I can easily share my experience and thoughts online.

    Please let me know if you have any recommendations or tips for brand new aspiring blog owners.
    Appreciate it!

  7. tinder dating site Says:

    There’s certainly a lot to know about this topic.
    I love all of the points you have made.

  8. tinder dating site Says:

    There’s certainly a lot to know about this topic.
    I love all of the points you have made.

  9. minecraft Says:

    We’re a gaggle of volunteers and starting a new scheme in our community.
    Your website offered us with useful information to work on.
    You have done an impressive job and our whole neighborhood can be thankful to you.

  10. Dating Sites Pasadena California Says:

    Hello, i believe that i noticed you visited my weblog thus i came to return the desire?.I’m trying to to find issues to enhance my website!I guess its good enough
    to use a few of your concepts!!

  11. tinyurl.com Says:

    Very good blog! Do you have any tips for aspiring writers?

    I’m planning to start my own site soon but I’m a little lost on everything.
    Would you advise starting with a free platform like Wordpress or go for a
    paid option? There are so many options out there that I’m
    totally overwhelmed .. Any ideas? Kudos!

  12. tinyurl.com Says:

    I believe that is among the such a lot vital info for me.
    And i’m glad studying your article. However want to
    statement on some general issues, The web site taste is
    perfect, the articles is truly excellent : D. Good job, cheers

  13. http://tinyurl.com Says:

    It’s awesome to pay a visit this web page and reading the views of all colleagues on the topic of this post, while I am also
    zealous of getting knowledge.

  14. tinder dating site Says:

    I’m extremely impressed with your writing skills
    and also with the layout on your weblog. Is this a paid theme or did you customize it yourself?
    Either way keep up the excellent quality writing, it’s rare to see a nice blog like this one nowadays.

  15. tinder dating site Says:

    I’m extremely impressed with your writing skills
    and also with the layout on your weblog. Is this a paid theme or did you customize it yourself?
    Either way keep up the excellent quality writing, it’s rare to see a nice blog like this one nowadays.

  16. tinder dating site Says:

    I’m extremely impressed with your writing skills
    and also with the layout on your weblog. Is this a paid theme or did you customize it yourself?
    Either way keep up the excellent quality writing, it’s rare to see a nice blog like this one nowadays.

  17. tinder dating site Says:

    Hmm is anyone else having problems with the pictures on this blog loading?
    I’m trying to figure out if its a problem on my end
    or if it’s the blog. Any suggestions would be greatly appreciated.

  18. tinder dating site Says:

    Have you ever thought about adding a little bit more than just your articles?
    I mean, what you say is important and all. However just imagine if you added some great photos or video clips to give
    your posts more, “pop”! Your content is excellent but with pics and
    videos, this site could certainly be one of the very best
    in its field. Excellent blog!

  19. tinder dating site Says:

    Have you ever thought about adding a little bit more than just your articles?
    I mean, what you say is important and all. However just imagine if you added some great photos or video clips to give
    your posts more, “pop”! Your content is excellent but with pics and
    videos, this site could certainly be one of the very best
    in its field. Excellent blog!

  20. tinder dating site Says:

    Have you ever thought about adding a little bit more than just your articles?
    I mean, what you say is important and all. However just imagine if you added some great photos or video clips to give
    your posts more, “pop”! Your content is excellent but with pics and
    videos, this site could certainly be one of the very best
    in its field. Excellent blog!

  21. tinder dating site Says:

    Write more, thats all I have to say. Literally, it seems as though you relied
    on the video to make your point. You clearly know what youre talking about, why waste your intelligence on just
    posting videos to your site when you could be giving us something informative to read?

  22. minecraft free download Says:

    I go to see daily a few blogs and websites to read articles, except
    this webpage gives feature based articles.

  23. download minecraft Says:

    Hi, I do believe this is a great web site. I stumbledupon it ;) I’m going to revisit
    once again since i have bookmarked it. Money and freedom is the greatest way
    to change, may you be rich and continue to help other people.

  24. www.krogerfeedback.com Says:

    Everything is very open with a very clear description of the challenges.
    It was really informative. Your site is very helpful.
    Many thanks for sharing!

  25. SHAREit Download Says:

    Transfer within a jiffy of time to get moved anything. It is very much faster than Bluetooth. No wastage of mobile data cables to transfer your documents

  26. Minecraft Says:

    My relatives all the time say that I am killing my time here at net, however I know
    I am getting familiarity everyday by reading
    such pleasant articles or reviews.

  27. Minecraft Says:

    My relatives all the time say that I am killing my time here at net, however I know
    I am getting familiarity everyday by reading
    such pleasant articles or reviews.

  28. Minecraft Says:

    My relatives all the time say that I am killing my time here at net, however I know
    I am getting familiarity everyday by reading
    such pleasant articles or reviews.

  29. Minecraft Says:

    My relatives all the time say that I am killing my time here at net, however I know
    I am getting familiarity everyday by reading
    such pleasant articles or reviews.

  30. https://whatsuply.com Says:

    This application is not officially readily available for Windows 8.1/ 8/10/7/ XP 32/64 little bit or Mac computer system, yet we could help you in mounting. Follow the steps to download WhatsApp on Computer totally free.

Leave a Reply