SoftBank: a person working at a door-to-door sales agent photographed contract copies to steal 6,347 customer records, and 62 illegal bank withdrawals followed
A person at a sales agent photographed or copied contract slips to steal the data; SoftBank's own customer database was not breached.
Disclosed
2021-03-04
Organizations involved
1
Leaked or at risk
6.3K
6,347
Downtime
Unknown
What happened
Impact
Between 2015 and 2018, a person doing agency work through door-to-door and booth sales at a multi-carrier store photographed or copied customer slips from contract procedures and obtained data on 6,347 customers: names, addresses, birth dates, phone numbers, mobile numbers, IMEI numbers, voicemail and call-forwarding PINs, and bank names and account numbers for payment. [1] [2]
Investigators told SoftBank that some of these customers suffered 62 illegal withdrawals from bank accounts, compensated by the banks. Bank PINs were not taken. SoftBank notified the customers by letter and reset the voicemail and similar PINs. [1] [2]
Timeline
- Disclosed 2021-03-04
- 1 days
Attack or cause
- Method
- [Insider]
- Impact
- [Data leak][Fraud][Financial loss]
- Entry point
- Supplier
Data exposed or at risk
Supply chain
Organizations involved
[Through a supplier][Major]Tokyo, MinatoInformation and communications6,347 leaked
SoftBank Corp.
Sources
- [1][Official]訪問販売代理店でのお客さま情報の不正取得についてSoftBank · 2021-03-04
- [2][News]訪問代理店が顧客情報を不正取得 - ソフトバンクSecurity NEXT · 2021-03-04
- [3][News]ソフトバンクの顧客情報6347件が不正持ち出し、62件の被害も発生Nikkei xTECH · 2021-03-04