7-Eleven Japan has shut down its 7pay mobile app two days after launching it on 1 July, after hackers exploited a badly designed password reset function and stole JPY55m ($510,000) from around 900 customers. According to a company press release, as well as enabling hackers to request new passwords for other accounts, the system also allowed them to be sent to third-party email addresses. The hack was discovered by security researcher Chris Vickery, who found that some of his customers had been locked out of their accounts without any notice or warning. Japan said it will compensate all users who lost money.
7-Eleven Japan has shut down its 7pay mobile app two days after launching it on 1 July, after hackers exploited a badly designed password reset function and stole JPY55m ($510,000) from around 900 customers. According to a company press release, as well as enabling hackers to request new passwords for other accounts, the system also allowed them to be sent to third-party email addresses. 7-Eleven Japan said it will compensate all users who lost money.