Taito: its server holding game data for the smartphone game Rakugaki Kingdom was accessed without authorization, and some data was deleted and may have leaked
A server holding game data was accessed without authorization, and some data was deleted and may have leaked. It held no personal information.
Disclosed
2021-04-23
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
A user asked why in-game data could not be downloaded. The company found traces of unauthorized access, stopped the service at 17:00 for emergency maintenance and made the related servers unreachable. Further investigation showed that some game data had been deleted and might have leaked. [1] [2]
The company strengthened security and reopened the service at 5:00, then announced the case. It finished restoring the deleted data at around 18:00 the same day. [1] [2]
Impact
The server hit by the access held the database of the characters, called doodles, that users create in the game. It held no personal information, and the company said that no customer information from its website, other games or e-commerce sites had leaked. [1] [2]
The data that may have leaked was stored in a format specific to this game that ordinary computers cannot reproduce. The company consulted the police and, when asked, did not disclose the period or method of the access or the scale of the damage. [2]
Timeline
- Started, Detected 2021-04-22
- Disclosed 2021-04-23
- 1 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Service outage]
- Entry point
- Unknown
Data exposed or at risk
–
Services hit
Organizations involved
[Breached][Critical]Tokyo, ShinjukuInformation and communications
TAITO CORPORATION
Sources
- [1][Official]ラクガキキングダムのゲームデータを保管するサーバへの不正アクセスについてお知らせTAITO CORPORATION · 2021-04-23
- [2][News]サーバに不正アクセス、一部ゲームデータが被害 - タイトーSecurity NEXT · 2021-04-27