NTT Logisco: its Chiba logistics center was accessed without authorization, and it first said up to 8 million customer records of the client NTT Plala might have leaked, but the number turned out to be about 500 with no trace of a leak

1. 2021-07-02

   NTT Plala announced that NTT Logisco, which handles delivery of its equipment, was accessed without authorization and that up to 8 million personal records might have leaked. [1]

2. 2021-07-09

   NTT Logisco released its investigation result. Two companies were affected, NTT Plala and one other; the personal records concerned narrowed to about 500, and no clear trace of a leak outside was found. [2] [3]

A misconfigured network left some terminals reachable from the internet, and a known vulnerability was exploited. Several servers across buildings of the center were compromised, and data was erased on some servers that manage NTT Plala data. All devices and terminals on the same network were checked for logs and malware, and terminals with traces were examined forensically. [2] [3]