Hakuto: a server was accessed without authorization; backup data of its core system was hit, likely through a VPN product flaw, with no trace of leakage

1. 2021-02-08

   The company noticed unauthorized access to a server and cut it off. It began checking the files hit, any leak of information and the cause. [1] [3]

2. 2021-02-12

   The company disclosed the case. [2] [3]

3. 2021-03-19

   The company published the results of an investigation by an expert organization. [2] [3]

The server that was hit held backup data of the core system, mostly order and sales data with business partners and information on partners and employees. The original data was not damaged and operations were not disrupted. The expert investigation found no trace of the backup data leaking, and the company had no report of secondary damage. [2] [3]

The access was most likely made by someone exploiting a vulnerability in a VPN product. The company has taken measures against the flaw and is undergoing a security assessment by an expert organization. [2] [3]