[Resolved][Severity: Critical][Intrusion]

Morinaga: its servers were accessed without authorization and personal data of 1,648,922 "Morinaga Direct Store" customers may have leaked

Several servers were accessed without authorization and data was locked; names and purchase histories of 1,648,922 mail-order customers may have leaked.

Disclosed

2022-03-22

Organizations involved

Leaked or at risk

1.6M

1,648,922

Downtime

Unknown

What happened

2022-03-13
Late at night failures occurred on several servers and an investigation found traces of unauthorized access. It immediately cut them off from external networks. [1]
2022-03-14
It set up a task force and began investigation and recovery with outside experts. [1]
2022-03-22
It announced the case. It had notified the Personal Information Protection Commission and the police. [1] [2]

Impact

Several servers were entered illegally and part of the internal data was locked, including the server holding shipping information for the mail-order business "Morinaga Direct Store" (formerly Tenshi no Kenko). Names, addresses, phone numbers, birth dates, genders, email addresses (some) and purchase histories of 1,648,922 customers who used it between May 1, 2018 and March 13, 2022 may have leaked. Credit card data is not included. No trace of data being taken out was found, but it could not rule out the possibility. The intrusion route was most likely a vulnerability in a network device on its internet line. The temporary halt of manufacturing systems still affects the supply of some products. [1] [2]