Bushu Pharmaceuticals: a VPN device vulnerability led to unauthorized access found through an extortion email, and about 13,000 personal records have probably leaked

1. 2022-06-25

   An employee received an extortion email from the attacking group and a leak of information from the server was confirmed. A response team with an investigation firm began checking the damage. [1]

2. 2022-08-31

   The investigation of the damage and cause by an outside security specialist finished. [1]

3. 2022-09-16

   After reporting to the Personal Information Protection Commission and the police, it announced the number of personal records that have probably leaked. [1]

The records that have probably leaked are about 3,000 employees (retirees included), about 3,100 recruitment candidates, about 2,900 temporary staff (retirees and candidates included) and about 4,000 people related to partner companies. The entry point was most likely a vulnerability in a VPN device. The internal servers have been restored and business is not affected. [1]