Boehringer Ingelheim Animal Health Japan: information on over 50,000 registered users and over 10,000 veterinarians of its flea, tick and filaria site leaked from a contractor's old server

1. 2021-06-25

   The Metropolitan Police told the company that information it held might have leaked onto the internet. The company and its contractor investigated with outside experts. [1]

2. 2021-07-05

   It reported to the Personal Information Protection Commission. [1]

3. 2021-07-21

   It reported to the Personal Information Protection Commission again. [1]

4. 2021-07-30

   It announced the case and began contacting the users and veterinarians concerned individually. [1]

The leaked data had been stored on the old server between May and August 2020. User registration data was over 50,000 records of names or nicknames, prefectures or addresses, email addresses, passwords, phone numbers (optional), LINE registered names, integration IDs and photos (optional). Veterinarian data was over 10,000 records of names, clinic names, addresses, phone numbers, email addresses and photos (optional). [1]

The retention period of the logs of that time had passed, so the cause was not identified, but it judged that unauthorized access to the old server in that period was likely. It confirmed the current server has no vulnerability and strengthened security. [1]