Saison Automobile and Fire Insurance: its policyholder page My Page suffered unauthorized logins on about 10,000 user IDs, and customer information may have been viewed
About 10,000 user IDs were logged into without authorization on the policyholder page My Page. Customer information may have been viewed by a third party.
Disclosed
2021-06-03
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
From this day, My Page was accessed without authorization and user IDs began to be logged into. [1]
The unauthorized access continued until June 1. A large number of login attempts were detected and an investigation found that about 10,000 user IDs were affected. An emergency maintenance session ran for about half a day from 19:30, during which contracts could not be made. [1]
It announced the case. [2]
Response
It locked the passwords of the accounts logged into without authorization, contacted the customers concerned to explain and apologize, and asked them to change their passwords. It blocked communication from the source of the access. Because customer information may have been viewed by a third party, it is investigating the extent of the impact. It did not disclose the number of attempts or the cause of the unauthorized logins. [1] [2]
Timeline
- Started 2021-05-24
- Detected 2021-06-01
- Disclosed 2021-06-03
- 10 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Data leak][Service outage]
- Entry point
- Stolen credentials
Data exposed or at risk
–
Services hit
Organizations involved
[Breached][Major]Tokyo, ShinjukuFinance and insurance10,000 leaked
SOMPO Direct Insurance Inc.
Sources
- [1][News]約1万件の契約者IDで不正ログイン - セゾン自動車火災保険Security NEXT · 2021-06-16
- [2][News]セゾン自動車火災保険の契約者専用ページに不正ログイン、約1万件が被害にScanNetSecurity · 2021-06-21 08:00