Oricon: the password of one email account was stolen and used to access it, leaving names and work email addresses of 17,625 business contacts open to view
One email account was accessed without authorization, leaving names and work contacts of 17,625 business contacts open to view.
Disclosed
2021-06-30
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Around this time, a business partner reported a suspicious email quoting an earlier exchange, and the unauthorized access came to light. [1]
Around this time, the password of that email account was changed and the access was blocked. [1]
Login passwords of all employees were reset and management was checked, and device authentication that blocks email use from unapproved devices was set up. [1]
It announced the case and apologized to the business partners concerned. [1]
Information left open to view
Names, work email addresses, company names, department names, work addresses and phone numbers of 17,625 business partners stored in the mailbox. [1]
Timeline
- Started, Detected 2021-06-16
- Disclosed 2021-06-30
- 14 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Data leak]
- Entry point
- Stolen credentials
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, MinatoInformation and communications17,625 leaked
Oricon Inc.
Sources
- [1][News]オリコンのメールアカウントへ不正アクセス、取引先から不審メール受信の連絡で発覚ScanNetSecurity · 2021-07-02 08:00