Tokyo Chemical Industry: its US subsidiary was accessed without authorization, and business-partner data held by the group, including in Japan, may have leaked
On June 23 it confirmed unauthorized access to its US subsidiary. Contact data of about 1,200 partners and 7,000 people may have leaked, but no leak is confirmed.
Disclosed
2022-11-01
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It confirmed unauthorized access to the systems of its US subsidiary, using advanced methods that evaded monitoring and detection. [1] [2]
It found that part of the corporate and personal information held by the group, including in Japan, may have leaked. [1]
It notified the Personal Information Protection Commission, and the police station on July 8. [1]
It removed the malware, confirmed safety and fully restarted its internal systems. [1]
It announced the case together with Tokyo Kasei Hanbai and TCI Chemical Trading. [1] [2]
Impact
The data that may have leaked covers about 1,200 business partners and about 7,000 people: company name, company address, contact person name, email address, phone number and similar. No leak had been confirmed at the time of the announcement. It monitors, on the advice of outside experts, whether the data is published. [1]
Timeline
- Started, Detected 2022-06-23
- Disclosed 2022-11-01
- 131 days
Attack or cause
- Method
- [Intrusion][Malware]
- Impact
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, KitaManufacturing
Tokyo Chemical Industry Co., Ltd.
Sources
- [1][Official]不正アクセスによる個人情報等流出の可能性に関するお詫びとご報告 | 東京化成工業株式会社Tokyo Chemical Industry Co., Ltd. · 2022-11-01
- [2][News]東京化成工業の米国子会社に不正アクセス、グループ企業保管情報が流出の可能性ScanNetSecurity · 2022-11-11 08:05