> JapanHacked_
[Resolved][Severity: Moderate][Web app exploit]

PR TIMES: image and PDF files of unpublished press releases on its distribution service were obtained without authorization

Over about two months, unpublished images and PDFs were obtained by guessing URLs and similar. A detailed report found 16 member companies and 17 accounts affected.

Disclosed

2021-07-09

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. From this day, unpublished release images and PDFs began to be obtained from one IP address. [1]

  2. The company noticed through a report from a member company about a post on social media. [1]

  3. Obtaining up to this day was confirmed. The company fixed the problem. [1]

  4. It announced the case. [1]

  5. It published a detailed report of the findings, covering acquisition from other IP addresses too. [2]

Impact

Unpublished information of 13 member companies and 14 accounts was affected: images for 230 releases and 28 PDFs were obtained. [1]

The detailed report found that 866 image zip files and 91 documents tied to 871 releases distributed between November 13, 2020 and July 6, 2021 were obtained, from 16 member companies and 17 accounts. This includes acquisition by 96 further IP addresses (636 images, 63 documents) on top of the first one (230 images, 28 documents). No material facts under the Financial Instruments and Exchange Act were found, and no member information leaked. No unauthorized acquisition has been confirmed since the fix on July 9. [2]

Timeline

  1. Started 2021-05-04
  2. Detected 2021-07-05
  3. Disclosed 2021-07-09
  4. 66 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]「PR TIMES」へ不正アクセス、公表前のPDF・画像ファイル 不正取得ScanNetSecurity · 2021-07-12 08:00
  2. [2][Official]PR TIMES発表前情報への不正アクセスに関する調査結果のご報告とお詫び(詳報)PR TIMES Corp. · 2021-09-22