> JapanHacked_
[Resolved][Severity: Moderate][Intrusion]

Hitachi Systems: unauthorized access to its IT operations monitoring service, with no customer data leak confirmed

Attackers got into a service that watches customer systems over VPN links to the data center. No leak of customer information was confirmed.

Disclosed

2020-12-04

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. According to Security NEXT, the company became aware around this day that it was being accessed without permission. A later Security NEXT article gives November 8. [2]

  2. The company disclosed the case and said it had already reported it to the National center of Incident readiness and Strategy for Cybersecurity, the economy ministry, IPA and JPCERT/CC. [1] [2]

Impact

The target was an operations monitoring service that links customer systems to the company's data center over IP-VPN lines to watch system messages and equipment faults. The company believes the access came through the network, and its checks found no sign that customer information left its systems. The service did not stop. [1] [2]

The company's press office said how it noticed the access and the cause were not being disclosed. [2]

Timeline

  1. Disclosed 2020-12-04
  2. 1 days

Attack or cause

Method
[Intrusion]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]ITシステムの運用監視サービスへの不正アクセスについてHitachi Systems · 2020-12-04
  2. [2][News]運用監視サービスに不正アクセス、顧客情報流出は確認されず - 日立システムズSecurity NEXT · 2020-12-07