H.I.S.: the file server of its Vietnamese subsidiary was accessed without authorization, and personal data including passport details of up to 1,846 people may have leaked
Names, birth dates and passport details of up to 1,846 people may have been taken from the file server of its Vietnamese subsidiary.
Disclosed
2022-02-08
Organizations involved
1
Leaked or at risk
1.8K
1,846
Downtime
Unknown
What happened
A virus block was reported on the file server of its Vietnamese local entity H.I.S. SONG HAN VIET NAM TOURIST (local time). It asked an outside expert for a simple remote investigation. [1] [2]
The outside expert confirmed the unauthorized access. The server was cut off from the network and external access was restricted. [1] [2]
Because the server could not be shipped, the hard disk with the extracted data arrived in Japan and an outside expert began a detailed analysis. [1]
It received a report that the stored data might have been taken outside. [1]
It identified the number of people whose data might have been taken as up to 1,846. [1]
It announced the case and reported to the Japan Tourism Agency and others. [1] [2]
Impact
Names, genders, birth dates and passport details of up to 1,846 people may have been taken, among those who departed for Vietnam with HIS between August 14, 2016 and February 22, 2020, and those who asked the Vietnamese entity to handle procedures. Phone numbers, addresses, email addresses and credit card data are not included. [1] [2]
Timeline
- Started 2021-10-25
- Detected 2021-10-28
- Disclosed 2022-02-08
- 106 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, ShinjukuPersonal services and entertainment1,846 leaked
H.I.S. Co., Ltd.The victim was its subsidiary in Vietnam.
Sources
- [1][Official]子会社ファイルサーバへの不正アクセスによる個人情報流出の可能性に関するお詫びとお知らせH.I.S. Co., Ltd. · 2022-02-08
- [2][News]HISベトナム子会社に不正アクセス、パスポート情報含む最大1,846名分の個人情報流出の可能性ScanNetSecurity · 2022-02-14 08:05