> JapanHacked_
[Resolved][Severity: Major][Malware]

Gunma Prefectural Council of Social Welfare: Emotet on a staff PC may have leaked 468 personal records and 370 email addresses

Member facilities received spam posing as council offices, and checks found a staff PC infected with Emotet. Data on training applicants and officers may have leaked.

Disclosed

2020-09-18

Organizations involved

1

Leaked or at risk

838

838

Downtime

Unknown

What happened

  1. From this day to September 15, member facilities reported spam sent to several of them in the name of one of the council's program offices. [1]

  2. At about this time, a staff PC was confirmed infected with Emotet. Mail posing as the offices of two other councils run by it was later found as well. [1]

Impact and response

468 personal records of training applicants, officers and office staff, such as names, genders, birth dates, addresses and phone numbers, and 370 stored email addresses may have leaked. The council explained and apologized to those affected, stopped the account, changed its password and checked every staff PC. [1]

Timeline

  1. Started 2020-09-14
  2. Detected 2020-09-16
  3. Disclosed 2020-09-18
  4. 4 days

Attack or cause

Method
[Malware]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[Name][Gender][Date of birth][Postal address][Phone number][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]「Emotet」に感染、個人情報流出の可能性 - 群馬県社会福祉協議会Security NEXT · 2020-09-18