Kinko's Japan: unauthorized access to its server may have lost or leaked order details such as business cards and New Year cards, and the access came from a partner company's PC

1. 2022-06-24

   After a problem with a business card order led to an investigation, it found a history of unauthorized access to the server. [1] [3]

2. 2022-07-04

   It published a first report. Order details such as business cards, address printing and flyers placed through Kinko's Online and the directly run stores, except those in Kyushu and Chugoku-Shikoku, may have been lost or leaked. [1] [2]

3. 2022-07-15

   It published a second report that traced the access to a PC of one partner company, which entered the server for a purpose outside its contract. No malware was found. It said a final report was due at the end of July. [1] [2] [3]

4. 2022-07-28

   It published the final report. [4] [5]

Of the orders from April 20, 2020 to May 12, 2022, 960 had an access history. 804 of them held personal data, covering 922 people. The access came from one partner company PC outside the scope of the contract; no malware was found, there was no secondary outflow, and the PC was isolated. [4] [5]