Hello Kitty owner Sanrio says fan site security leak fixed
byKelvin Chan
In this July 24, 2014 file photo, a model dressing as Japanese character Hello Kitty, right, along with Hong Kong actresses Priscilla Wong, left, and Celine Yeung, second from left, pose with a new figure of Hello Kitty unveiled at the Madame Tussauds in Hong Kong, to mark the 40th anniversary of the birth of the popular Sanrio character. The Japanese company that owns the Hello Kitty brand said it has fixed a security leak in an online fan site for the famous character that compromised the personal information of 3.3 million users. Sanrio Co.'s digital arm said Tuesday, Dec. 22, 2015, that it "corrected" a security vulnerability on the SanrioTown.com website and was carrying out an investigation. The leak was discovered Saturday, Dec. 19, by a security researcher. (AP Photo/Kin Cheung, File)
The Japanese company that owns the Hello Kitty brand said it has fixed a security leak in an online fan site for the famous character that compromised the personal information of 3.3 million users.
Sanrio Co.'s digital arm said Tuesday that it "corrected" a security vulnerability on the SanrioTown.com website and was carrying out an investigation. The leak was discovered Saturday by a security researcher.
Hong Kong-based Sanrio Digital said anyone who knew the Internet addresses of "specific vulnerable servers" could have accessed personal information such as names and birthdates. Passwords were also available but encrypted.
However, it added that the data did not include credit card or other payment details, and that no information was stolen.
"We investigated the problem and applied fixes, including securing the servers identified as vulnerable" by the security researcher, Chris Vickery, the company said in a security advisory posted on the site.
SanrioTown.com is an online community for Hello Kitty enthusiasts around the world operated by Sanrio Digital. The site lets users play games, watch videos and keep up with news on their favorite cute character.
The site's members include 186,261 minors, said Mark Leeper, whose public relations firm is representing Sanrio Digital.
It's the second Internet security breach in the past month involving a large amount of children's data.
In this June 30, 2012 file photo, people ride on a sightseeing bus painted with a Hello Kitty character in Tokyo. The Japanese company that owns the Hello Kitty brand said it has fixed a security leak in an online fan site for the famous character that compromised the personal information of 3.3 million users. Sanrio Co.'s digital arm said Tuesday, Dec. 22, 2015, that it "corrected" a security vulnerability on the SanrioTown.com website and was carrying out an investigation. The leak was discovered Saturday, Dec. 19, by a security researcher. (AP Photo/Koji Sasahara, File)
Kids' technology maker VTech reported a data breach that exposed the personal information of 6.4 million children around the world as well as 4.9 million parent accounts they were connected to. British police have arrested one man on hacking-related charges in that case.
Sanrio Digital is a joint venture between Hong Kong game developer Typhoon Games, which has a 70 percent stake, and Sanrio, which owns the rest.
In this Thursday, Oct. 30, 2014 file photo, a model dressing as Japanese character Hello Kitty waits for guests to pose for a souvenir photo at Sanrio Puroland, a theme park featuring Hello Kitty in Tokyo. The Japanese company that owns the Hello Kitty brand said it has fixed a security leak in an online fan site for the famous character that compromised the personal information of 3.3 million users. Sanrio Co.'s digital arm said Tuesday, Dec. 22, 2015, that it "corrected" a security vulnerability on the SanrioTown.com website and was carrying out an investigation. The leak was discovered Saturday, Dec. 19, by a security researcher. (AP Photo/Eugene Hoshiko, File)
Citation:
Hello Kitty owner Sanrio says fan site security leak fixed (2015, December 23)
retrieved 11 July 2024
from https://phys.org/news/2015-12-kitty-owner-sanrio-fan-site.html
This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
part may be reproduced without the written permission. The content is provided for information purposes only.
![Hello Kitty owner Sanrio says fan site security leak fixed](https://scx1.b-cdn.net/csz/news/800a/2015/hellokittyow.jpg "In this July 24, 2014 file photo, a model dressing as Japanese character Hello Kitty, right, along with Hong Kong actresses Priscilla Wong, left, and Celine Yeung, second from left, pose with a new figure of Hello Kitty unveiled at the Madame Tussauds in Hong Kong, to mark the 40th anniversary of the birth of the popular Sanrio character. The Japanese company that owns the Hello Kitty brand said it has fixed a security leak in an online fan site for the famous character that compromised the personal information of 3.3 million users. Sanrio Co.'s digital arm said Tuesday, Dec. 22, 2015, that it "corrected" a security vulnerability on the SanrioTown.com website and was carrying out an investigation. The leak was discovered Saturday, Dec. 19, by a security researcher. (AP Photo/Kin Cheung, File)")
![Hello Kitty owner Sanrio says fan site security leak fixed](https://scx1.b-cdn.net/csz/news/800a/2015/1-hellokittyow.jpg "In this June 30, 2012 file photo, people ride on a sightseeing bus painted with a Hello Kitty character in Tokyo. The Japanese company that owns the Hello Kitty brand said it has fixed a security leak in an online fan site for the famous character that compromised the personal information of 3.3 million users. Sanrio Co.'s digital arm said Tuesday, Dec. 22, 2015, that it "corrected" a security vulnerability on the SanrioTown.com website and was carrying out an investigation. The leak was discovered Saturday, Dec. 19, by a security researcher. (AP Photo/Koji Sasahara, File)")
![Hello Kitty owner Sanrio says fan site security leak fixed](https://scx1.b-cdn.net/csz/news/800a/2015/2-hellokittyow.jpg "In this Thursday, Oct. 30, 2014 file photo, a model dressing as Japanese character Hello Kitty waits for guests to pose for a souvenir photo at Sanrio Puroland, a theme park featuring Hello Kitty in Tokyo. The Japanese company that owns the Hello Kitty brand said it has fixed a security leak in an online fan site for the famous character that compromised the personal information of 3.3 million users. Sanrio Co.'s digital arm said Tuesday, Dec. 22, 2015, that it "corrected" a security vulnerability on the SanrioTown.com website and was carrying out an investigation. The leak was discovered Saturday, Dec. 19, by a security researcher. (AP Photo/Eugene Hoshiko, File)")
