[Resolved][Severity: Major][Phishing][Intrusion]

Ebara: a maintenance contractor's PC was taken over, 1,720 customer records at risk

A work PC of Idea, Ebara's pump maintenance contractor, was taken over after phishing, and data of 1,720 Ebara customers may have leaked.

Disclosed

2020-01-14

Organizations involved

Leaked or at risk

1.7K

1,720

Downtime

Unknown

What happened

2020-01-07
In the evening, a third party took remote control of a work PC at the contractor Idea while it was in use. [1]
2020-01-08
Idea reported the attack to Ebara. [1]

Impact

The PC held work reports with names, addresses and phone numbers of {n:1720} customers in Tokyo, Kanagawa and other areas. No misuse had been reported. [1]

Cause

The contractor fell for a phishing attack. [1]

Response

Ebara reported the case to the police and the PPC. [1]

Timeline

Disclosed 2020-01-14
1 days

Attack or cause

Method: [Phishing][Intrusion]
Impact: [Data leak]
Entry point: Supplier

Data exposed or at risk

[Name][Postal address][Phone number]

Supply chain

[Breached]

Ebara Corporation

[Breached]

Ebara Corporation

Organizations listed on this site: 1

Organizations involved

[Through a supplier][Major]Tokyo, OtaManufacturing1,720 leaked
Ebara Corporation
Customer data in work reports stored on the PC of its contractor Idea.

						Note
Ebara Corporation	[Through a supplier]	[Major]	Tokyo, Ota	Manufacturing	1,720	Customer data in work reports stored on the PC of its contractor Idea.

Open in organization search

Sources

[1][News]顧客情報含む委託先PCに外部から不正な遠隔操作 - 荏原製作所Security NEXT · 2020-01-16