> JapanHacked_
[Investigating][Severity: Major][Intrusion]

Kobe Bussan: its server was accessed without authorization, and personal data and some corporate information leaked

It confirmed unauthorized access to its server in the early hours of December 4. Personal data and some corporate information leaked, and it is checking the scope.

Disclosed

2021-12-20

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. In the early hours it confirmed unauthorized access by a third party to its server and cut external communication at once. [1]

  2. It restored its internal systems. [1]

  3. It announced the case. It reported to and consulted the Hyogo police and the Personal Information Protection Commission. [1]

Impact

It confirmed that personal data and some corporate information leaked, and said the scope was under investigation. Data of the Gyomuca point card and credit cards is held by outside contractors, so member data did not leak. The accounting system is a cloud service and no unauthorized access to it was found. [1]

Timeline

  1. Detected 2021-12-04
  2. Disclosed 2021-12-20
  3. 16 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによる個人情報等流出の可能性に関するお知らせとお詫びKobe Bussan Co., Ltd. · 2021-12-20