> JapanHacked_
[Resolved][Severity: Major][Intrusion]

Seibu Railway: it detected unauthorized access to its line information site GRUTTO PLUS, took the site offline, and reopened it about a year later with stronger security

It detected unauthorized access to a line information site and took it offline. A third-party probe found no sign of intrusion, and the site reopened after 351 days.

Disclosed

2020-04-14

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Seibu Railway announced that it had detected unauthorized access from outside to its site GRUTTO PLUS, which covers areas along the Seibu lines. It said it would suspend the site for the time being and carry out maintenance. [1] [2] [4]

  2. The company published the result of a third-party investigation. No trace of an intrusion or compromise from outside was found, and no customers had reported damage. [4]

  3. The company reopened the site in a renewed form with stronger security and regular monitoring. It took 351 days from the announcement of the suspension to the reopening. [3] [4]

Timeline

  1. Detected, Disclosed 2020-04-14
  2. 1 days

Attack or cause

Method
[Intrusion]
Impact
[Service outage]
Entry point
Unknown

Data exposed or at risk

–

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]西武線沿線情報サイトに不正アクセス - サイトを一時休止Security NEXT · 2020-04-15
  2. [2][News]沿線地域情報サイト「GRUTTO PLUS」で不正アクセスを検知、休止しメンテナンス実施(西武鉄道)ScanNetSecurity · 2020-04-17 08:00
  3. [3][Official]“遊んで”“食べて”“自然に触れる”西武鉄道をもっと身近に! 西武線沿線地域の魅力を共有・発信する情報サイト「GRUTTO PLUS(ぐるっとプラス)」3月31日(水)リニューアルオープン!Seibu Railway · 2021-03-31
  4. [4][News]不正アクセス検知で休止したWebサイト、セキュリティ強化し再開するまで351日要すScanNetSecurity · 2021-04-02 08:00