> JapanHacked_
[Resolved][Severity: Major][Malware]

Nikkei: malware from an email attachment leaked data of 12,514 staff and others

A group employee opened an infected email attachment, and names and other data of people on the internal network were sent out.

Disclosed

2020-05-12

Organizations involved

1

Leaked or at risk

12.5K

12,514

Downtime

Unknown

What happened

  1. A group employee's PC was infected by malware in an email attachment. The malware was new, so the detection tools in place were slow to catch it. [1] [2]

  2. Public disclosure. [1]

Impact

Names, departments and email addresses of 12,514 people, including executives, staff, former staff, temporary and part-time workers and contractors of Nikkei and some group companies and bodies, leaked. Reader and customer data and reporting material were not included. [1] [2]

Response

The unauthorized transfers were blocked, and the systems that produce the newspaper and digital edition were not affected. Staff were warned about emails pretending to come from people they know. [1] [2]

Timeline

  1. Detected 2020-05-08
  2. Disclosed 2020-05-12
  3. 4 days

Attack or cause

Method
[Malware]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[Name][Employment][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]グループ企業のパソコンが新種ウイルス感染、社員ほか1万2,514人分の個人情報流出(日本経済新聞社)ScanNetSecurity · 2020-05-13 08:00
  2. [2][News]添付ファイルでマルウェア感染、個人情報流出 - 日経Security NEXT · 2020-05-12