NITOMS: an employee fell for smishing, a third party used the account, and information on contacts at business partners may have leaked

1. 2021-04-30

   An employee received an SMS posing as an outside company on a work device and entered the account and password by mistake. A third party then accessed that account without authorization. [1]

2. 2021-05-12

   It reported to the Personal Information Protection Commission. [1]

Names, company names, phone numbers and business card data of partner contacts may have leaked. The number was not disclosed and the company declined to answer when asked. It explained what happened to the contacts concerned and apologized to them individually. [1]