Kuraray: a server it operates was accessed without authorization, and names and company contacts of business partners and employees may have leaked
A possible leak through unauthorized access was confirmed on October 1. A second report found names and company contacts of partners and group employees included.
Disclosed
2021-10-14
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It confirmed a possible leak through unauthorized access and blocked the access route to prevent further leaks. [1]
It announced the case. It is investigating in detail with an outside firm. [1]
It published a second report. Part of the information that may have leaked included personal data such as names and company contacts of business partners and group employees. It reported to the Personal Information Protection Commission. [2]
Impact
The personal data that may have leaked does not include credit card information or the like. The people concerned are being checked and contacted individually. [2]
Timeline
- Started, Detected 2021-10-01
- Disclosed 2021-10-14
- 13 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Okayama, KurashikiManufacturing
Kuraray Co., Ltd.
Sources
- [1][News]高機能樹脂等取扱い東証1部上場企業クラレに不正アクセス、情報流出の可能性ScanNetSecurity · 2021-10-19 08:05
- [2][Official]不正アクセスによる情報流出に関するお知らせ(第2報)Kuraray Co., Ltd. · 2021-11-02