Yamashita: the server of a company that rents and sells welfare equipment and supplies linen was accessed without authorization, and information including personal data leaked to an overseas server
Its server was accessed without authorization and part of its information, including personal data, was sent to an overseas server. No misuse was confirmed.
Disclosed
2021-06-22
Organizations involved
2
Leaked or at risk
Unknown
Downtime
Unknown
What happened
An alert warned of unauthorized access, and an investigation found that part of the information had been sent to an overseas server. [1] [2]
Minato City learned that the information that leaked in the unauthorized access to its contractor Yamashita's server included data of users of the city's daily living equipment program for the elderly. [3]
Minato City announced the leak of personal data of users of elderly services. [3]
Impact
Information including personal data leaked. No misuse was confirmed. [1] [2]
Information on 14 users of Minato City's program also leaked: names only for 9, names and addresses for 4, and a name with welfare benefit information for 1. The city and the contractor explained and apologized to the 14 people. [3]
Timeline
- Detected 2021-05-01
- Disclosed 2021-06-22
- 52 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
–
Supply chain
Organizations involved
[Through a supplier][Major]Tokyo, MinatoMunicipality14 leaked
Minato City[Breached][Major]Shizuoka, ShimadaPersonal services and entertainment
Yamashita Co., Ltd.
Sources
- [1][Official]不正アクセスによる情報流出に関するお知らせとお詫びYamashita Co., Ltd. · 2021-06-22
- [2][News]福祉用具レンタル 販売業者に不正アクセス、海外サーバへ情報流出ScanNetSecurity · 2021-06-25 08:00
- [3][News]東京都港区のサービス利用者の個人情報流出、委託先事業者へ不正アクセスScanNetSecurity · 2021-08-12 08:00