CROSS PLUS: a server in its data center was accessed without authorization, its core systems were damaged and online sales and deliveries to business partners were affected

1. 2022-07-19

   Early in the morning, it found unauthorized access by a third party to a server in its data center. Its core and related systems were also damaged. [1]

2. 2022-07-19

   In the early morning it found an anomaly in its servers, immediately stopped them and cut the network. An investigation found that part of the internal data had been encrypted by ransomware. [2]

3. 2022-07-21

   It announced the case. Sales on its own online site and deliveries to business partners were affected. [1]

4. 2022-09-14

   It announced that a leak of part of the personal data could not be ruled out. The encryption and the deletion of access logs made the investigation take time. [2]

The personal data that may have leaked totals 81,318 records: 33,882 shareholders (name, address), 40,400 consumer customers (two or more of name, address, phone number and birth date), 761 business partners (company name, address, phone number, trade information), 2,475 applicants to the entrance exam (name, school, faculty) and 3,800 employees and former employees (name, address, phone number, career history, health insurance card number). There is no report of an actual leak. It holds no card data, and registrants of its online site are not covered. [2]