> JapanHacked_
[Resolved][Severity: Major][Intrusion]

Chiba City (FeliCa Pocket Marketing): a contractor server for the Chiba City Point trial was accessed without authorization, and birth dates of about 8,000 participants may have leaked

A contractor database was accessed without authorization, and birth dates of about 8,000 participants and about 2,600 email addresses may have leaked.

Disclosed

2021-10-12

Organizations involved

2

Leaked or at risk

8K

8,000

Downtime

Unknown

What happened

  1. The contractor FeliCa Pocket Marketing told Chiba City that there were traces of an attack on its server. [1] [2]

  2. The contractor reported to the city that participant data may have leaked. [1]

  3. Chiba City announced the case. [1] [2]

Information that may have leaked

A database recording participants' IDs, passwords, postal codes and point usage history was accessed without authorization, and birth dates of about 8,000 people and about 2,600 email addresses may have leaked. A separate server holding names, addresses and phone numbers was not affected. [2]

Timeline

  1. Started, Detected 2021-09-29
  2. Disclosed 2021-10-12
  3. 13 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Supplier

Data exposed or at risk

[Date of birth][E-mail address][Passwords]

Supply chain

Organizations listed on this site
2

Organizations involved

Open in organization search

Sources

  1. [1][News]ちばシティポイント業務委託先の管理サーバに不正アクセス、利用者の情報が流出の可能性ScanNetSecurity · 2021-10-15 08:05
  2. [2][News]「ちばシティポイント」参加者の個人情報流出かSankei Shimbun · 2021-10-12