> JapanHacked_
[Resolved][Severity: Major][Malware]

Hiramatsu: two employee PCs were infected with Emotet, leaking mail with personal data of up to 2,800 people including online shop and meal voucher customers

One infected PC stored online wine orders, its mail was stolen, and malicious mail spread widely to people inside and outside the company, customers included.

Disclosed

2020-10-20

Organizations involved

1

Leaked or at risk

2.8K

2,800

Downtime

Unknown

What happened

  1. A sales employee's PC was infected with Emotet, and virus-laden mail based on its stored messages went out, mainly to people inside the company. [1]

  2. Another sales employee's PC was infected. It held orders for wine sold online, and its mail data was stolen. [1]

  3. The company confirmed that malicious mail was reaching many people inside and outside, including customers. [1]

  4. It published its findings and reported to the Personal Information Protection Commission. [1]

Impact

Names, mail addresses and message text of some customers who exchanged mail with the company from January 6, 2020 leaked, including buyers on the Hiramatsu Online shop and meal voucher applicants. The messages held names, addresses, phone numbers and delivery details of up to 2,800 people. No card data leaked. [1]

Response

The company shut down the two PCs, checked all PCs repeatedly with tools including EmoCheck, and deleted mail containing personal data from staff PCs. It paused Hiramatsu Online, changed the system so personal data is no longer sent by mail, and set up an emergency task force. [1]

Timeline

  1. Started 2020-09-21
  2. Detected 2020-09-29
  3. Disclosed 2020-10-20
  4. 29 days

Attack or cause

Method
[Malware]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[Name][Postal address][Phone number][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]「Emotet」感染、「ひらまつオンライン」お食事券申込者メール情報流出ScanNetSecurity · 2020-10-28 08:00