Initio Foods: attackers exploited a network device vulnerability to reach its server, possibly leaking personal data of about 65,000 customers, business contacts and employees

1. 2021-03-02

   The company detected a server failure and confirmed that the server had stopped working. It investigated with its system vendor. [1] [2]

2. 2021-03-03

   The company filed a damage report with the police and reported to the Personal Information Protection Commission. [1] [2]

3. 2021-03-06

   The system was restored. [2]

4. 2021-03-24

   The company announced the case. [2]

The cause is presumed to be an attack on a network device vulnerability. Names, addresses and phone numbers of about 43,000 past customers and recipients of the company's New Year dishes may have leaked. [1] [2]

Also affected are business card data of about 3,000 contact people, names and agency names of about 1,000 dispatched staff, and names, addresses, phone numbers and bank account details of 1,940 current employees and 15,815 former employees (11,888 of them part-timers): about 65,000 people in total. [1] [2]

The company cut the connection to external networks, changed passwords and fixed the vulnerability. [2]