> JapanHacked_
[Contained][Severity: Critical][Unknown]

JCCA: an overseas site claimed about 72,000 of its members' records, and the association stopped its systems

Tipped off by the Tokyo police, the civil engineers' association found an overseas site claiming about 72,000 of its records, and stopped its systems.

Disclosed

2020-04-21

Organizations involved

1

Leaked or at risk

72K

72,000

Downtime

Unknown

What happened

  1. The Tokyo Metropolitan Police's cyber unit asked the association to check an overseas site that seemed to show its data. The English-language site said it had obtained about 72,000 of the association's personal records. [1]

  2. Public disclosure. The association had its system administrator stop the system. [1]

  3. The system for individual members resumed at 8 a.m.; some functions were planned to return in mid-May. [1]

Impact

The site said it held about 72,000 records with sign-up reception numbers, passwords, birth dates, email addresses and phone numbers; this was not verified. The reception numbers are not used after joining, and the association said its continuing education records (CPDS) could not be altered with them. [1]

Timeline

  1. Detected 2020-04-16
  2. Disclosed 2020-04-21
  3. 5 days

Attack or cause

Method
[Unknown]
Impact
[Data leak][Service outage]
Entry point
Unknown

Data exposed or at risk

[E-mail address][Phone number][Date of birth][Passwords]

Organizations involved

Open in organization search

Sources

  1. [1][News]会員情報が海外サイトに流出か「約72,000件 個人情報入手」の記載（全国土木施工管理技士会連合会）ScanNetSecurity · 2020-04-24 08:00