Kyoei Steel: a server was accessed without authorization; no customer data leaked, but user ID data of group employees and others may have
The server was accessed without authorization on the night of February 12. An investigation found that names and mail addresses of employees may have leaked.
Disclosed
2021-02-16
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
In the night, the server was accessed without authorization. [1]
The company noticed the access. It cut off the access and restored the system without affecting normal operations, and began checking the scope, any leak and the cause with an outside firm. [1]
The company disclosed the case. [2]
The company published the results of its investigation. [2]
Findings
An investigation with a security firm found no fact that highly confidential data such as customer information leaked from the server. It did find that user ID information of group employees and others, such as names and mail addresses, may have leaked. No secondary damage had been found, but the company warned on its website that suspicious mail or contact impersonating employees might arrive. [2]
As of February, no effect on its manufacturing sites in Japan and abroad or on related companies had been found. [1]
Timeline
- Started 2021-02-12
- Detected 2021-02-13
- Disclosed 2021-02-16
- 4 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Osaka, Osaka, KitaManufacturing
Kyoei Steel Ltd.
Sources
- [1][News]サーバに不正アクセス、原因や影響など調査中 - 共英製鋼Security NEXT · 2021-02-18
- [2][Official]当社サーバーへの不正アクセスに関する調査結果のお知らせKyoei Steel · 2021-04-06