> JapanHacked_
[Resolved][Severity: Critical][Lost device]

Hokuto Bank: a CD-R with ATM records from a merged branch was lost, including account numbers and balances of 3,977 customers

A CD-R collected from the ATM of a merged branch went missing. It held 24,147 transactions covering 3,977 customers.

Disclosed

2020-10-22

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

At the former Aikawa branch, merged into the Takanosu branch on September 7, the journal CD-R taken from the ATM removed on September 4 went missing. The bank found no sign of theft and said it was most likely thrown away by mistake. [1]

It held 24,147 transactions from November 23, 2019 to June 7, 2020 involving 3,977 customers: names, bank codes, branch and account numbers, amounts and balances after each transaction, and for transfers the sender's name and phone number and the receiving account. The data was encrypted and needed special systems to read. [1]

Timeline

  1. Disclosed 2020-10-22
  2. 1 days

Attack or cause

Method
[Lost device]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Bank account][Phone number]

Organizations involved

Open in organization search

Sources

  1. [1][News]ATMの取引情報を記録したCD-Rを紛失 - 北都銀Security NEXT · 2020-10-22