Seibu Railway: it detected unauthorized access to its line information site GRUTTO PLUS, took the site offline, and reopened it about a year later with stronger security
It detected unauthorized access to a line information site and took it offline. A third-party probe found no sign of intrusion, and the site reopened after 351 days.
Disclosed
2020-04-14
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Seibu Railway announced that it had detected unauthorized access from outside to its site GRUTTO PLUS, which covers areas along the Seibu lines. It said it would suspend the site for the time being and carry out maintenance. [1] [2] [4]
The company published the result of a third-party investigation. No trace of an intrusion or compromise from outside was found, and no customers had reported damage. [4]
The company reopened the site in a renewed form with stronger security and regular monitoring. It took 351 days from the announcement of the suspension to the reopening. [3] [4]
Timeline
- Detected, Disclosed 2020-04-14
- 1 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Service outage]
- Entry point
- Unknown
Data exposed or at risk
–
Services hit
Organizations involved
[Breached][Major]Tokyo, ToshimaTransport and postal services
Seibu Railway Co., Ltd.
Sources
- [1][News]西武線沿線情報サイトに不正アクセス - サイトを一時休止Security NEXT · 2020-04-15
- [2][News]沿線地域情報サイト「GRUTTO PLUS」で不正アクセスを検知、休止しメンテナンス実施(西武鉄道)ScanNetSecurity · 2020-04-17 08:00
- [3][Official]“遊んで”“食べて”“自然に触れる”西武鉄道をもっと身近に! 西武線沿線地域の魅力を共有・発信する情報サイト「GRUTTO PLUS(ぐるっとプラス)」3月31日(水)リニューアルオープン!Seibu Railway · 2021-03-31
- [4][News]不正アクセス検知で休止したWebサイト、セキュリティ強化し再開するまで351日要すScanNetSecurity · 2021-04-02 08:00