Panasonic System Solutions Japan: about 4,300 login credentials for its partner member site leaked, and about 4,000 matched real members

1. 2020-11-17

   In the evening, after learning that about 4,300 sets of login details might have leaked, the company took down its members-only partner site, Partner DIRECT. ScanNetSecurity gives the 18th as the closing date. [1] [2]

2. 2020-11-23

   To avoid a second leak, the company also stopped several services run in the same environment. [1] [2]

3. 2020-11-30

   The company announced the leak. A check of the leaked data found about 4,000 entries that matched members' mail addresses and passwords. [1] [2]

The leaked items were the mail addresses and passwords used to log in, and about 4,000 of the roughly 4,300 matched members. The company asked members who reuse the same ID and password elsewhere to change them, and said the cause and course of events were still under investigation. [1] [2]

Asked by Security NEXT how it learned of the leak, the company declined to comment, and it did not say whether the passwords had been stored in hashed form. [1]