I-O DATA: attackers got into a NarSuS test server and took about 60,000 user records

1. 2020-05-07

   The company found the intrusion into the test server and cut the server off the network. [2] [4]

2. 2020-05-08

   Public disclosure; the public NarSuS server was shut down, so NAS units could not be monitored remotely in the meantime. [1] [3]

3. 2020-05-13

   With an outside firm, the company confirmed that weak server settings had been attacked and that user data had leaked. [4] [6]

4. 2020-06-04

   Final report: besides the test server, one related server also showed signs of intrusion. User data that should have been deleted when the test server was built had been left on it. [2] [5] [7]

No trace of data being taken out was found, but because the servers were broken into, the company counted all 61,942 user records as leaked. They include names, company and department names, addresses, phone and fax numbers, email addresses, product models, MAC addresses and serial numbers. The company said data stored on the NAS units and users' networks were not reached. [2] [5] [7]

Outside access was not properly restricted, the account password was weak and monitoring was lacking. The company shut down the affected servers, tightened outside access and said it would reset every account password when the service reopened in mid-June. [2] [5]