> JapanHacked_
[Resolved][Severity: Critical][Intrusion]

Comtex: an intrusion into a server may have leaked bank accounts and passwords of about 2,800 online trading applicants

An intruder got into a server at the commodity futures broker. Names, workplaces, bank accounts, passwords and more entered by people applying for trading accounts may have leaked.

Disclosed

2020-08-28

Organizations involved

1

Leaked or at risk

2.8K

2,800

Downtime

Unknown

What happened

  1. At about this time, the company confirmed that customer data was leaking through an intrusion into a server. The same day it deleted the customer data from the server and cut off outside access. [1]

  2. The supervising ministry was informed. [1]

  3. The police were notified. [1]

Impact and response

About 2,800 records entered in applications for online trading accounts may have leaked, including names, addresses, phone numbers, birth dates, email addresses, workplaces, bank accounts and passwords. New applications were suspended, those affected were emailed, and anyone reusing the password elsewhere was asked to change it. [1]

Timeline

  1. Detected 2020-08-25
  2. Disclosed 2020-08-28
  3. 3 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Name][Postal address][Phone number][Date of birth][E-mail address][Employment][Bank account][Passwords]

Organizations involved

Open in organization search

Sources

  1. [1][News]口座開設申込者の個人情報が流出した可能性 - 商品先物取引業者Security NEXT · 2020-09-01