> JapanHacked_
[Resolved][Severity: Major][Intrusion]

Kuraray: a server it operates was accessed without authorization, and names and company contacts of business partners and employees may have leaked

A possible leak through unauthorized access was confirmed on October 1. A second report found names and company contacts of partners and group employees included.

Disclosed

2021-10-14

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It confirmed a possible leak through unauthorized access and blocked the access route to prevent further leaks. [1]

  2. It announced the case. It is investigating in detail with an outside firm. [1]

  3. It published a second report. Part of the information that may have leaked included personal data such as names and company contacts of business partners and group employees. It reported to the Personal Information Protection Commission. [2]

Impact

The personal data that may have leaked does not include credit card information or the like. The people concerned are being checked and contacted individually. [2]

Timeline

  1. Started, Detected 2021-10-01
  2. Disclosed 2021-10-14
  3. 13 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][E-mail address][Phone number]

Organizations involved

Open in organization search

Sources

  1. [1][News]高機能樹脂等取扱い東証1部上場企業クラレに不正アクセス、情報流出の可能性ScanNetSecurity · 2021-10-19 08:05
  2. [2][Official]不正アクセスによる情報流出に関するお知らせ(第2報)Kuraray Co., Ltd. · 2021-11-02