> JapanHacked_
[Investigating][Severity: Major][Intrusion]

Cleantex Japan: data on its servers was encrypted and the order details of up to 40,600 own-store and shopping-mall orders may have leaked, also reaching customers of its business partners Senshukai and Otsuka

Data on several servers was encrypted on July 8, and orderer and recipient details of up to 40,600 orders for entrance mats and other items may have leaked.

Disclosed

2022-07-15

Organizations involved

3

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. In the morning, staff could no longer get into the internal systems, and data on several servers was found to be encrypted. [1] [3]

  2. It reported to the police and the Personal Information Protection Commission. [1] [3]

  3. It told its customer Senshukai. [2]

  4. It published a first report. Senshukai announced the same day how its own customers were affected. [1] [2]

  5. Otsuka announced the effect on customers of its "Tanomail" mail-order business. [3] [4]

Impact

The names, addresses and phone numbers of orderers and recipients, and the items ordered, for up to 40,600 orders placed from May 11, 2016 to July 7, 2022 on its own store, Rakuten, Amazon and Yahoo! Shopping may have leaked. No card data is included. [1]

At Senshukai, the recipient names and order numbers of up to 4,630 customers who bought entrance mats since 2017 are covered. At Otsuka, the names, addresses, phone numbers and company names of about 950 orders for the company's entrance mats placed through "Tanomail" since 2017 are covered, and the exact count was still being checked. [2] [3]

Timeline

  1. Detected 2022-07-08
  2. Disclosed 2022-07-15
  3. 7 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address][Phone number]

Supply chain

Organizations involved

Open in organization search

Sources

  1. [1][Official]社内サーバーへの不正アクセスによる個人情報流出の可能性のお知らせとお詫び(第一報) – クリーンテックス・ジャパン株式会社Cleantex Japan Co., Ltd. · 2022-07-15
  2. [2][Official]お客様情報流出の可能性に関するお知らせとお詫びSenshukai Co., Ltd. · 2022-07-15
  3. [3][Official]クリーンテックス社が保有する弊社のお客様情報 流出の可能性に関するお知らせとお詫び | 大塚商会Otsuka Corporation · 2022-07-20
  4. [4][News]クリーンテックスへの不正アクセス、「たのめーる」に影響の可能性ScanNetSecurity · 2022-07-25 08:05