> JapanHacked_
[Contained][Severity: Major][Intrusion]

Moncler Japan: Moncler's IT systems suffered a sophisticated cyberattack, and personal data of customers in Japan may have leaked

Unauthorized access to the parent group's IT systems may have leaked personal data. Card data is said not to be included.

Disclosed

2022-01-25

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It confirmed unauthorized access to Moncler's IT systems. The attackers used advanced and sophisticated techniques, which made it take long to grasp the whole picture. [1]

  2. Reuters reported that, after Moncler refused a ransom demand, some of the data obtained was released on the dark web. [2]

  3. ScanNetSecurity reported the announcement by Moncler Japan. [1]

Impact

According to Reuters, the stolen data concerned employees, former employees, some suppliers and consultants, and some customers registered on its website, and did not include card or other payment data. [2]

Timeline

  1. Detected 2021-12-22
  2. Disclosed 2022-01-25
  3. 34 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]衣料品取り扱い「MONCLER」にサイバー攻撃、個人情報が流出した可能性ScanNetSecurity · 2022-01-25 08:05
  2. [2][News]Moncler says key data on customers safe despite hacking incident | ReutersReuters · 2022-01-18