Nikkei BP: member accounts of "Nikkei Medical Online" were accessed without authorization and e-gift codes were read

1. 2022-06-21

   In the afternoon, it found that a third party had accessed some member accounts without authorization. [1]

2. 2022-06-24

   It announced the case. It stopped the e-gift code display screen and asked members to change their passwords. [1]

3. 2022-06-28

   From this day, there were cyberattacks from overseas IP addresses. [2]

4. 2022-07-03

   It announced that part of the registration data of more than 4,000 members may have been stolen. From the afternoon it stopped the site, reset the passwords of all 880,000 members and reopened at 11:18 p.m. It also found that in a small number of the June 24 cases, part of the member registration data had been rewritten. [2]

A third party obtained information such as the password needed for point exchange. 559 accounts were accessed without authorization, and the e-gift codes of 50 of them were read. The cause and the content and scale of any leak were under investigation. It was considering compensation for any misuse. [1]

In attacks since June 28, part of the registration data of more than 4,000 members may have been stolen. Besides the e-gift code display screen, it stopped the screens for changing registration data. It was considering compensation if gift codes are misused. It reported to the Personal Information Protection Commission and was investigating with the police and others. [2]