Cleantex Japan: data on its servers was encrypted and the order details of up to 40,600 own-store and shopping-mall orders may have leaked, also reaching customers of its business partners Senshukai and Otsuka
Data on several servers was encrypted on July 8, and orderer and recipient details of up to 40,600 orders for entrance mats and other items may have leaked.
Disclosed
2022-07-15
Organizations involved
3
Leaked or at risk
Unknown
Downtime
Unknown
What happened
In the morning, staff could no longer get into the internal systems, and data on several servers was found to be encrypted. [1] [3]
It reported to the police and the Personal Information Protection Commission. [1] [3]
It published a first report. Senshukai announced the same day how its own customers were affected. [1] [2]
Otsuka announced the effect on customers of its "Tanomail" mail-order business. [3] [4]
Impact
The names, addresses and phone numbers of orderers and recipients, and the items ordered, for up to 40,600 orders placed from May 11, 2016 to July 7, 2022 on its own store, Rakuten, Amazon and Yahoo! Shopping may have leaked. No card data is included. [1]
At Senshukai, the recipient names and order numbers of up to 4,630 customers who bought entrance mats since 2017 are covered. At Otsuka, the names, addresses, phone numbers and company names of about 950 orders for the company's entrance mats placed through "Tanomail" since 2017 are covered, and the exact count was still being checked. [2] [3]
Timeline
- Detected 2022-07-08
- Disclosed 2022-07-15
- 7 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Supply chain
- Organizations listed on this site
- 3
Organizations involved
[Through a supplier][Major]Tokyo, ChiyodaInformation and communications950 leaked
Otsuka CorporationCleantex held customer data through a supplier of the "Tanomail" mail-order business.
[Breached][Major]Hyogo, Kobe, Nishi-kuWholesale and retail trade40,600 leaked
Cleantex Japan Co., Ltd.[Through a supplier][Major]Osaka, Osaka, Kita-kuWholesale and retail trade4,630 leaked
Senshukai Co., Ltd.Cleantex was a supplier of Senshukai and handled the shipping of its products.
Sources
- [1][Official]社内サーバーへの不正アクセスによる個人情報流出の可能性のお知らせとお詫び(第一報) – クリーンテックス・ジャパン株式会社Cleantex Japan Co., Ltd. · 2022-07-15
- [2][Official]お客様情報流出の可能性に関するお知らせとお詫びSenshukai Co., Ltd. · 2022-07-15
- [3][Official]クリーンテックス社が保有する弊社のお客様情報 流出の可能性に関するお知らせとお詫び | 大塚商会Otsuka Corporation · 2022-07-20
- [4][News]クリーンテックスへの不正アクセス、「たのめーる」に影響の可能性ScanNetSecurity · 2022-07-25 08:05