> JapanHacked_
[Resolved][Severity: Major][Intrusion]

Japan Arts Council: an intrusion into its website leaked 54,445 addresses of National Theatre newsletter subscribers

The arts council's website was attacked from the night of August 2 to midday on August 3, and email addresses of subscribers to the National Theatre newsletter leaked.

Disclosed

2020-08-07

Organizations involved

1

Leaked or at risk

54.4K

54,445

Downtime

Unknown

What happened

  1. From about this time until just after noon on August 3, outsiders accessed the website without permission. [1]

  2. Staff noticed the website could not be viewed. The same day they found the intrusion, blocked the source IP address and moved the email addresses off the site. [2]

  3. The leak of newsletter subscribers' addresses was confirmed, and new sign-ups were stopped. [2]

  4. Public disclosure; affected subscribers received an apology email. [2]

Impact

Email addresses of 54,445 subscribers to the National Theatre newsletter, which announces shows at the National Theatre, the National Engei Hall, the National Noh Theatre and the National Bunraku Theatre, leaked. [1] [2]

Timeline

  1. Started 2020-08-02
  2. Detected 2020-08-03
  3. Disclosed 2020-08-07
  4. 5 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak][Service outage]
Entry point
Web app

Data exposed or at risk

[E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]不正アクセスで「国立劇場メルマガ」の登録メアドが流出Security NEXT · 2020-08-11
  2. [2][News]Webサイトへ不正アクセス、国立劇場メルマガ５万件のアドレス流出（日本芸術文化振興会）ScanNetSecurity · 2020-08-12 08:00