[Investigating][Severity: Major][Intrusion]

Sanyo SC Development: servers on the cloud and PCs were accessed without authorization, and a leak of about 7,950 personal records cannot be ruled out

A server failure on September 19 turned out to be unauthorized access to cloud servers and PCs. About 7,950 records of customers, partners and others may have leaked.

Disclosed

2022-09-26

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2022-09-19
A server failure led to an investigation, which found that part of the cloud servers used for internal work and some PCs seem to have been accessed without authorization. It sent a preliminary report to the Personal Information Protection Commission and notified the police. [1]
2022-09-26
It announced the case and set up an inquiry desk. [1]

Impact

No leak is confirmed, but a leak cannot be ruled out for about 600 customers (such as lists of event participants), about 7,200 people related to partners (tenant staff training lists, contact details of tenants and partners, recruitment information) and about 150 employees and former employees. Besides names, some records include addresses, phone numbers and email addresses. Card member data is not included. The operation of the station building shopping facilities it runs is not affected. [1]