> JapanHacked_
[Resolved][Severity: Major][Insider]

Haneda Airport Face Express: a former employee of a sub-subcontractor abused administrator rights and took personal data of 1,046 people outside

A former employee of a US subcontractor took personal data of 1,046 people. All was recovered and deleted, with no sign of leakage to third parties.

Disclosed

2022-04-08

Organizations involved

2

Leaked or at risk

1K

1,046

Downtime

Unknown

What happened

  1. It announced that it had been told by AirLink of the United States, to which operation of the face-recognition boarding system "Face Express" at the Haneda Airport international terminal was subcontracted, that a former employee had abused administrator rights and taken personal data outside by improper means. [1] [2]

Impact

The personal data taken covered 1,046 people. As of April 8 it had been told that, after verification by a specialist body, AirLink had recovered all of it from the former employee and erased it completely, and that no sign of leakage to third parties was found. [1]

Timeline

  1. Disclosed 2022-04-08
  2. 1 days

Attack or cause

Method
[Insider]
Impact
[Data leak]
Entry point
Supplier

Data exposed or at risk

–

Supply chain

Organizations involved

Open in organization search

Sources

  1. [1][Official]Face Expressシステムの取り扱いについてTokyo International Air Terminal Corporation and Japan Airport Terminal Co., Ltd. · 2022-04-08
  2. [2][News]羽田空港のFace Expressシステム運用再委託先の元社員が個人情報を社外に持ち出しScanNetSecurity · 2022-04-12 08:05