Haneda Airport Face Express: a former employee of a sub-subcontractor abused administrator rights and took personal data of 1,046 people outside
A former employee of a US subcontractor took personal data of 1,046 people. All was recovered and deleted, with no sign of leakage to third parties.
Disclosed
2022-04-08
Organizations involved
2
Leaked or at risk
1K
1,046
Downtime
Unknown
What happened
It announced that it had been told by AirLink of the United States, to which operation of the face-recognition boarding system "Face Express" at the Haneda Airport international terminal was subcontracted, that a former employee had abused administrator rights and taken personal data outside by improper means. [1] [2]
Impact
The personal data taken covered 1,046 people. As of April 8 it had been told that, after verification by a specialist body, AirLink had recovered all of it from the former employee and erased it completely, and that no sign of leakage to third parties was found. [1]
Timeline
- Disclosed 2022-04-08
- 1 days
Attack or cause
- Method
- [Insider]
- Impact
- [Data leak]
- Entry point
- Supplier
Data exposed or at risk
–
Supply chain
- Organizations listed on this site
- 2
Organizations involved
[Through a supplier][Major]Tokyo, OtaReal estate and rental1,046 leaked
Japan Airport Terminal Co., Ltd.[Through a supplier][Major]Tokyo, OtaTransport and postal services1,046 leaked
Tokyo International Air Terminal Corporation
Sources
- [1][Official]Face Expressシステムの取り扱いについてTokyo International Air Terminal Corporation and Japan Airport Terminal Co., Ltd. · 2022-04-08
- [2][News]羽田空港のFace Expressシステム運用再委託先の元社員が個人情報を社外に持ち出しScanNetSecurity · 2022-04-12 08:05