Kyoto Station Building Development: its cloud server was accessed without authorization and personal data of about 4,650 people may have leaked
A cloud server was accessed without authorization, and names and addresses of about 950 customers, 3,400 partners and 300 staff may have leaked.
Disclosed
2022-04-15
Organizations involved
1
Leaked or at risk
4.7K
4,650
Downtime
Unknown
What happened
A failure occurred on a server. Investigating the cause, it found that the cloud server used for departmental work had come under an unauthorized access attack. [1]
It announced the case. It sent a quick report to the Personal Information Protection Commission and informed the police. It began notifying affected people by post from the same day. [1] [2]
Impact
Departmental working documents on the server contained some personal data, and a leak cannot be ruled out. The scope is about 950 customers, 3,400 business partners and 300 employees and former employees. Besides names and addresses, some records include job titles, phone numbers and email addresses. There is no credit card data. The intrusion route was under investigation. [1]
Timeline
- Detected 2022-04-09
- Disclosed 2022-04-15
- 6 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Kyoto, Kyoto, Shimogyo-kuReal estate and rental4,650 leaked
Kyoto Station Building Development Co., Ltd.
Sources
- [1][Official]弊社サーバーへの不正アクセスによる個人情報流出の可能性のお知らせとお詫びKyoto Station Building Development Co., Ltd. · 2022-04-15
- [2][News]京都駅ビル開発のクラウドサーバへ不正アクセス、個人情報流出の可能性ScanNetSecurity · 2022-04-19 08:05