> JapanHacked_
[Resolved][Severity: Major][Intrusion]

Kyoei Steel: a server was accessed without authorization; no customer data leaked, but user ID data of group employees and others may have

The server was accessed without authorization on the night of February 12. An investigation found that names and mail addresses of employees may have leaked.

Disclosed

2021-02-16

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. In the night, the server was accessed without authorization. [1]

  2. The company noticed the access. It cut off the access and restored the system without affecting normal operations, and began checking the scope, any leak and the cause with an outside firm. [1]

  3. The company disclosed the case. [2]

  4. The company published the results of its investigation. [2]

Findings

An investigation with a security firm found no fact that highly confidential data such as customer information leaked from the server. It did find that user ID information of group employees and others, such as names and mail addresses, may have leaked. No secondary damage had been found, but the company warned on its website that suspicious mail or contact impersonating employees might arrive. [2]

As of February, no effect on its manufacturing sites in Japan and abroad or on related companies had been found. [1]

Timeline

  1. Started 2021-02-12
  2. Detected 2021-02-13
  3. Disclosed 2021-02-16
  4. 4 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]サーバに不正アクセス、原因や影響など調査中 - 共英製鋼Security NEXT · 2021-02-18
  2. [2][Official]当社サーバーへの不正アクセスに関する調査結果のお知らせKyoei Steel · 2021-04-06