> JapanHacked_
[Investigating][Severity: Major][Intrusion]

PFI Kubu Youth Plaza: the website of the Tokyo Sports Culture Hall it runs was accessed without authorization, possibly affecting six form entries

The Tokyo Sports Culture Hall website was accessed without authorization several times. It is checking whether six reservation form entries leaked.

Disclosed

2021-12-08

Organizations involved

1

Leaked or at risk

6

6

Downtime

Unknown

What happened

  1. From this day until the 23rd, the website was accessed without authorization several times. [1] [2]

  2. The hosting company detected suspicious behavior. [1] [2]

  3. It saw an alert that justified judging it as unauthorized access and shut the website down. [1] [2]

  4. It confirmed unauthorized access between November 5 and 23. [1] [2]

  5. The Tokyo Metropolitan Board of Education announced the case. [1]

Impact

Between November 5 and 22:57 on November 23, 6 entries in the reservation and inquiry form (organization or company name, name, phone number and email address) may have been affected. Whether they leaked was still being checked. Visiting the site in that period posed no risk of malware infection. [1] [2]

Timeline

  1. Started 2021-11-05
  2. Detected 2021-11-22
  3. Disclosed 2021-12-08
  4. 33 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Phone number][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][Official]PFI事業者の運用するホームページへの不正アクセスについてTokyo Metropolitan Board of Education · 2021-12-08
  2. [2][News]東京スポーツ文化館のサイトに不正アクセス - 情報流出の影響を調査Security NEXT · 2021-12-10