> JapanHacked_
[Resolved][Severity: Major][Insider]

SoftBank: a person working at a door-to-door sales agent photographed contract copies to steal 6,347 customer records, and 62 illegal bank withdrawals followed

A person at a sales agent photographed or copied contract slips to steal the data; SoftBank's own customer database was not breached.

Disclosed

2021-03-04

Organizations involved

1

Leaked or at risk

6.3K

6,347

Downtime

Unknown

What happened

  1. SoftBank announced the case. It said it learned of the theft while helping with the investigation of a person arrested by the Metropolitan Police Department on suspicion of a separate computer fraud. [1] [2] [3]

Impact

Between 2015 and 2018, a person doing agency work through door-to-door and booth sales at a multi-carrier store photographed or copied customer slips from contract procedures and obtained data on 6,347 customers: names, addresses, birth dates, phone numbers, mobile numbers, IMEI numbers, voicemail and call-forwarding PINs, and bank names and account numbers for payment. [1] [2]

Investigators told SoftBank that some of these customers suffered 62 illegal withdrawals from bank accounts, compensated by the banks. Bank PINs were not taken. SoftBank notified the customers by letter and reset the voicemail and similar PINs. [1] [2]

Timeline

  1. Disclosed 2021-03-04
  2. 1 days

Attack or cause

Method
[Insider]
Impact
[Data leak][Fraud][Financial loss]
Entry point
Supplier

Data exposed or at risk

[Name][Postal address][Date of birth][Phone number][Bank account]

Supply chain

[Breached]

Organizations listed on this site
1

Organizations involved

Open in organization search

Sources

  1. [1][Official]訪問販売代理店でのお客さま情報の不正取得についてSoftBank · 2021-03-04
  2. [2][News]訪問代理店が顧客情報を不正取得 - ソフトバンクSecurity NEXT · 2021-03-04
  3. [3][News]ソフトバンクの顧客情報6347件が不正持ち出し、62件の被害も発生Nikkei xTECH · 2021-03-04