Murata Manufacturing: an employee of its sub-subcontractor IBM Dalian in China downloaded data on 72,460 partners and employees without permission and uploaded it to a personal cloud account

1. 2021-06-28

   It emerged that an employee of IBM Dalian Global Delivery Co., Ltd. in China, a sub-subcontractor of its contractor IBM Japan, downloaded project management data including Murata partner and personal information to a work PC without permission and uploaded it to a personal account of an external cloud service in China. [1]

2. 2021-06-30

   The sub-subcontractor's internal monitoring system raised a security alert, and the investigation found the employee's download. [1]

3. 2021-07-08

   Interviewing the employee revealed the upload. The same day the uploaded data was deleted under the sub-subcontractor's supervision. [1]

4. 2021-07-20

   The contractor reported to Murata. [1]

5. 2021-08-05

   It announced the case. [1]

In total 72,460 records: 30,555 of partner information (company names, addresses, names, phone numbers, email addresses, bank accounts) and 41,905 of Murata employee-related information (employee numbers, company names, names, email addresses, bank accounts). An investigation by the external cloud provider confirmed no sign that a third party copied or downloaded the data. [1]