JEC: its storage was accessed without authorization and became inaccessible, and data on contacts and trainees at client firms may have leaked

1. 2021-11-04

   In the morning its storage became inaccessible, and checks showed unauthorized access by a third party. It reported to JIPDEC and the Personal Information Protection Commission. [1]

2. 2021-11-05

   It reported to the police and moved its data to an external cloud. [1]

3. 2021-11-26

   It announced the case. [1] [2]

4. 2022-01-13

   It published the result of an investigation by an outside firm. The unauthorized access was on the morning of November 3, and it judged that data on about 20,000 people had leaked. [3]

The data covered in-house training and consulting clients from June 2019 to November 2021. It includes contacts' company names, names, addresses, departments, phone and fax numbers and some email addresses, plus trainees' names and departments and training materials. [1]

The investigation found that the unauthorized access took place on the morning of November 3 and judged that client data stored on the storage had leaked. The leaked personal data covers about 1,000 contacts and about 19,000 trainees, about 20,000 people in total. No virus activity or suspicious behavior was found, and no misuse of the data has been confirmed. It retired the storage and moved the data to an external cloud. [3]