[Resolved][Severity: Major][Intrusion]

AQURA HOME: an intrusion into the JAHBnet builder matching site may have leaked customer data, including income

An intruder got into the builder matching site on July 12. Names, addresses, incomes and housing wishes of customers who used the matching service may have leaked.

Disclosed

2020-07-29

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2020-07-12
A third party broke into the JAHBnet official site, which introduces member builders to customers. [1] [2]
2020-07-14
The company found that customer and member builder data may have leaked. [1] [2]
2020-07-29
Public disclosure. The site server had been stopped to cut off the intruder, and the police were consulted. Experts are looking into the cause. [1]

Impact

Names, name readings, postal codes, addresses, ages, genders, phone numbers, email addresses, jobs, incomes (in steps of one million yen) and housing wishes of customers who used the matching service may have leaked. The company gave no count. [1] [2]

Member builders' names, addresses and phone numbers were also exposed, but these were already public on the site. At the time of the notice, no actual leak had been confirmed. [1]