> JapanHacked_
[Investigating][Severity: Major][Intrusion]

Kyoto Station Building Development: its cloud server was accessed without authorization and personal data of about 4,650 people may have leaked

A cloud server was accessed without authorization, and names and addresses of about 950 customers, 3,400 partners and 300 staff may have leaked.

Disclosed

2022-04-15

Organizations involved

1

Leaked or at risk

4.7K

4,650

Downtime

Unknown

What happened

  1. A failure occurred on a server. Investigating the cause, it found that the cloud server used for departmental work had come under an unauthorized access attack. [1]

  2. It announced the case. It sent a quick report to the Personal Information Protection Commission and informed the police. It began notifying affected people by post from the same day. [1] [2]

Impact

Departmental working documents on the server contained some personal data, and a leak cannot be ruled out. The scope is about 950 customers, 3,400 business partners and 300 employees and former employees. Besides names and addresses, some records include job titles, phone numbers and email addresses. There is no credit card data. The intrusion route was under investigation. [1]

Timeline

  1. Detected 2022-04-09
  2. Disclosed 2022-04-15
  3. 6 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address][Phone number][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][Official]弊社サーバーへの不正アクセスによる個人情報流出の可能性のお知らせとお詫びKyoto Station Building Development Co., Ltd. · 2022-04-15
  2. [2][News]京都駅ビル開発のクラウドサーバへ不正アクセス、個人情報流出の可能性ScanNetSecurity · 2022-04-19 08:05