EDION: a server of the delivery management system run by a group company was accessed without authorization; 77,656 records were deleted and may have leaked

1. 2022-04-08

   At about noon it was told by its group company Hampstead Inc., which it had entrusted with operation, that the server had been accessed from outside without authorization and the stored information deleted. [1]

2. 2022-04-11

   It announced the case. It reported to the Personal Information Protection Commission and planned to notify the police. [1]

The total is 77,656 records: 73,540 delivery and installation records for air conditioners and similar goods (names, addresses, phone numbers and so on), 3,563 images of receipt signatures and 553 photos. The data was not only deleted but may also have leaked. No payment information such as credit cards is included. [1]

The cause was still under investigation, but it was found to be unauthorized access to the server of a new delivery management system that had partly gone live. It set up a response team including outside experts and said it would tighten its management system. [1]