> JapanHacked_
[Resolved][Severity: Major][Intrusion]

ALL CONNECT: inquiry customer data in the cloud was accessed without authorization, and 14,955 records of three group companies leaked

Names, addresses, phone numbers and mail addresses from inquiries made between 2012 and 2015 were downloaded.

Disclosed

2020-11-04

Organizations involved

3

Leaked or at risk

15K

14,955

Downtime

Unknown

What happened

  1. The cloud provider warned of suspicious access. [1]

  2. The company confirmed that data had been downloaded. [1]

  3. It reported to the Kansai Information Center. [1]

  4. It reported to JIPDEC. [1]

  5. It hired an outside firm, which reported on July 31. [1]

  6. It began notifying affected customers. [1]

Impact

Company
Records
3,649
9,866
Full Commit (formerly Peakline)
1,440
[1]

The data covers names, addresses, phone numbers and mail addresses of people who made inquiries to each company and to related lead-generation sites between 2012 and 2015, 14,955 records in total. [1]

Timeline

  1. Detected 2020-02-27
  2. Disclosed 2020-11-04
  3. 251 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address][Phone number][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]不正アクセスで問合顧客の情報が流出 - ALL CONNECTSecurity NEXT · 2020-11-10