Linical: traces of unauthorized access were found on its server, which was temporarily stopped to investigate

1. 2021-10-03

   At 23:06, there were traces of unauthorized access to the server by a third party. [1]

2. 2021-10-04

   It began recovery work and temporarily stopped the server to investigate the cause and damage. [1]

3. 2021-10-05

   It announced the case. [1]

4. 2021-11-03

   An outside investigator found traces suggesting that information had been stolen from the servers in Japan and Taiwan. [3] [4]

5. 2021-12-06

   It announced that personal data and more, up to about 220,000 records in total, may have leaked. [3] [4]

The investigation so far has found no trace of data destruction or information leaks. It is also examining whether this is related to the attack found at its European subsidiary on October 21. [2]

The starting point was a vulnerability in a VPN device. Data on the servers was encrypted and access logs were erased, which made the investigation difficult. It estimated the maximum amount of data that may have leaked from information on the restored servers. The personal data includes about 30,000 staff of business partners, about 35,000 principal and sub-investigators of clinical trials, about 60,000 trial coordinators and others, about 14,000 job applicants, about 21,000 individual shareholders and about 60,000 (in total) individual shareholders on older registers, with names, addresses, phone numbers, email addresses and more. Data on clinical trial subjects sat in a separate environment and was not affected. It does not plan to pay the ransom; it fixed the VPN device, strengthened multi-factor authentication and rebuilt the servers. [3] [4]