> JapanHacked_
[Resolved][Severity: Major][Intrusion]

Yamashita: the server of a company that rents and sells welfare equipment and supplies linen was accessed without authorization, and information including personal data leaked to an overseas server

Its server was accessed without authorization and part of its information, including personal data, was sent to an overseas server. No misuse was confirmed.

Disclosed

2021-06-22

Organizations involved

2

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. An alert warned of unauthorized access, and an investigation found that part of the information had been sent to an overseas server. [1] [2]

  2. It announced the case. [1] [2]

  3. Minato City learned that the information that leaked in the unauthorized access to its contractor Yamashita's server included data of users of the city's daily living equipment program for the elderly. [3]

  4. Minato City announced the leak of personal data of users of elderly services. [3]

Impact

Information including personal data leaked. No misuse was confirmed. [1] [2]

Information on 14 users of Minato City's program also leaked: names only for 9, names and addresses for 4, and a name with welfare benefit information for 1. The city and the contractor explained and apologized to the 14 people. [3]

Timeline

  1. Detected 2021-05-01
  2. Disclosed 2021-06-22
  3. 52 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

–

Supply chain

Organizations listed on this site
2

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによる情報流出に関するお知らせとお詫びYamashita Co., Ltd. · 2021-06-22
  2. [2][News]福祉用具レンタル 販売業者に不正アクセス、海外サーバへ情報流出ScanNetSecurity · 2021-06-25 08:00
  3. [3][News]東京都港区のサービス利用者の個人情報流出、委託先事業者へ不正アクセスScanNetSecurity · 2021-08-12 08:00