> JapanHacked_
[Resolved][Severity: Moderate][Intrusion]

Chouei: its server may have been attacked and was stopped; no leak of customer data was confirmed

Its server was attacked on the night of May 10. The investigation found no trace of data being stolen or taken out.

Disclosed

2022-05-18

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The server may have been attacked at night and was stopped. [1]

  2. It announced the case. The scope is limited and no customer data leak was confirmed. [1]

  3. An investigation by an outside firm finished, and it announced that no trace of data being stolen or taken out was found. [2]

Findings and measures

Monitoring of terminals, forensics and analysis of logs and malware found no trace of data theft or outflow. As measures, it replaced the VPN device used for remote access, introduced multi-factor authentication and changed the internal network configuration. There is no significant effect on its results. [2]

Timeline

  1. Started, Detected 2022-05-10
  2. Disclosed 2022-05-18
  3. 8 days

Attack or cause

Method
[Intrusion]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社サーバーへの不正アクセスについてCHOEI CO., LTD. · 2022-05-18
  2. [2][Official]当社サーバーへの不正アクセスの調査結果についてCHOEI CO., LTD. · 2022-06-21