Yukiyama: its ski slope tracking app yukiyama was accessed without authorization, and the images and run logs of all users were deleted and could not be recovered
Image and run log files of all users from before March 25 were deleted from an external storage server. No personal information leaked.
Disclosed
2021-03-26
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Impact
Everything lost was the posted images and icon images of all users from before March 25, 2021, and all past run logs (CSV files recording the latitude, longitude and elevation of runs). The company tried to recover them but could not. [1] [2]
No unauthorized access to the servers that manage personal information and user data was confirmed, so no personal information leaked, and the check-in history of distance, speed and elevation can still be seen. The company said it would check the whole system, review its security measures, strengthen authentication, have a third party check them and back up all information regularly. The cause was not disclosed, and the company declined interviews. [1] [2]
Timeline
- Detected, Disclosed 2021-03-26
- 1 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Service outage]
- Entry point
- Unknown
Data exposed or at risk
–
Services hit
Organizations involved
[Breached][Critical]Hyogo, Kobe, ChuoInformation and communications
Yukiyama Inc.
Sources
- [1][News]「yukiyama」アプリに不正アクセス、画像データが全削除被害にScanNetSecurity · 2021-04-01 08:00
- [2][News]スキー場の滑走記録アプリに不正アクセス - ログや画像が消失Security NEXT · 2021-04-06