> JapanHacked_
[Contained][Severity: Major][Intrusion][Malware]

Tokyo Chemical Industry: its US subsidiary was accessed without authorization, and business-partner data held by the group, including in Japan, may have leaked

On June 23 it confirmed unauthorized access to its US subsidiary. Contact data of about 1,200 partners and 7,000 people may have leaked, but no leak is confirmed.

Disclosed

2022-11-01

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It confirmed unauthorized access to the systems of its US subsidiary, using advanced methods that evaded monitoring and detection. [1] [2]

  2. It found that part of the corporate and personal information held by the group, including in Japan, may have leaked. [1]

  3. It notified the Personal Information Protection Commission, and the police station on July 8. [1]

  4. It removed the malware, confirmed safety and fully restarted its internal systems. [1]

  5. It announced the case together with Tokyo Kasei Hanbai and TCI Chemical Trading. [1] [2]

Impact

The data that may have leaked covers about 1,200 business partners and about 7,000 people: company name, company address, contact person name, email address, phone number and similar. No leak had been confirmed at the time of the announcement. It monitors, on the advice of outside experts, whether the data is published. [1]

Timeline

  1. Started, Detected 2022-06-23
  2. Disclosed 2022-11-01
  3. 131 days

Attack or cause

Method
[Intrusion][Malware]
Impact
Entry point
Unknown

Data exposed or at risk

[Name][E-mail address][Phone number]

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによる個人情報等流出の可能性に関するお詫びとご報告 | 東京化成工業株式会社Tokyo Chemical Industry Co., Ltd. · 2022-11-01
  2. [2][News]東京化成工業の米国子会社に不正アクセス、グループ企業保管情報が流出の可能性ScanNetSecurity · 2022-11-11 08:05