> JapanHacked_
[Resolved][Severity: Major][Misdelivery]

Shinsei Bank: in a data migration to Monex Securities it wrongly sent customer data of 1,469 accounts that were not to be transferred

In preparing a transfer of fund accounts, it sent customer data, including My Number, of 1,469 accounts outside the transfer to Monex Securities.

Disclosed

2021-12-28

Organizations involved

1

Leaked or at risk

1.5K

1,469

Downtime

Unknown

What happened

  1. Monex Securities pointed out that the data included customer data of accounts not subject to the transfer. [1]

  2. It announced the case. [1]

Impact and cause

In preparing to transfer the rights and obligations of investment trust custody accounts to Monex Securities on January 4, 2022, it encrypted and sent customer data of individuals, including My Number, and of corporations tied to the accounts, and the data wrongly included 1,469 accounts outside the transfer. The cause was a flaw in the data extraction work. [1]

Timeline

  1. Detected 2021-12-22
  2. Disclosed 2021-12-28
  3. 6 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[My Number][Name][Bank account]

Organizations involved

Open in organization search

Sources

  1. [1][News]新生銀行がデータ移行ミス、吸収分割による承継対象以外の口座情報1,469件をマネックス証券へ送付ScanNetSecurity · 2022-01-06 08:05