Kobe Steel: intruders in its network reached 250 files with defense-related and personal data
Kobe Steel was breached in 2016 and 2017; 250 files with Defense Ministry-related and personal information were accessed, and a leak could not be ruled out.
Disclosed
2020-02-06 18:04
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
- In August 2016 the company noticed signs of outside access to its network, removed the malware and began strengthening its security. [1] [3]
- In June 2017, while that work was still under way, it found signs of a new intrusion. [1]
- In October 2017 the Ministry of Defense confirmed that the information possibly taken held none of the secrets it designates. [1] [2]
- On the ministry disclosed the case, after Mitsubishi Electric: intruders used an unknown flaw in antivirus servers, personal data and business secrets at risk and NEC: unauthorized access to a server of its defense division, and the company published details. [2] [1] [3]
Impact
Response
The company said it had already completed security improvements based on the government's Cybersecurity Management Guidelines and similar guidance. [1]
Timeline
- Disclosed 2020-02-06
- 1 days
Attack or cause
- Method
- [Intrusion][Malware]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Major]Hyogo, Kobe, ChuoManufacturing
Kobe Steel, Ltd.
Sources
- [1][Official]当社ネットワークへの不正アクセスについてKobe Steel · 2020-02-06
- [2][Official]防衛関連企業に対する不正アクセス事案についてMinistry of Defense · 2020-02-06
- [3][News]神戸製鋼所とパスコにサイバー攻撃 防衛情報標的かNikkei · 2020-02-06 18:04
- [4][News]防衛省、関連企業2社でも不正アクセスあったと公表 防衛機密の流出は否定ITmedia NEWS · 2020-02-07 12:53
- [5][News]2017年6月に不正アクセスを確認、流出した情報に防衛省指定の秘密等は含まれず(神戸製鋼所)ScanNetSecurity · 2020-02-10 08:00