Fujitsu: unauthorized communication hit network devices of its FENICS service, and some emails on the TKC mail service may have been viewed from outside

1. 2022-11-07

   Emails sent or received on the TKC mail service for member offices (ProFIT) between 17:30 and 17:40 may have been viewable from outside. [1]

2. 2022-11-08

   Emails in the windows 10:45 to 11:00 and 15:40 to 15:50 may likewise have been viewable from outside. [1]

3. 2022-12-09

   Fujitsu confirmed unauthorized external communication from some network devices of the FENICS internet service. [1] [2]

4. 2022-12-23

   TKC announced that its mail service may have been accessed without authorization. [1] [2]

5. 2022-12-23

   Fujitsu announced that it had confirmed unauthorized communication to the outside from some network devices of the FENICS internet service. FUJITSU Hybrid IT Service FJcloud-O uses this service and was affected. [3]

6. 2022-12-26

   Fujitsu Cloud Technologies announced that its rental server service "Nifcloud Rental Server" also uses this service and was affected. [4]

7. 2023-02-20

   Fujitsu published the investigation result. On some network devices a program that steals the account data of Fujitsu service operators who logged in to the devices was running, and a specific stolen operator account was misused. Unauthorized communication may have taken place since March 28, 2022, but Fujitsu kept no external communication logs from March 28 to May 15. TKC announced that no leak occurred at TKC. Takara Belmont announced that part of the communication data of its salon POS service "SALONPOS LinQ" may have leaked. [5] [6] [7] [8]

8. 2023-02-24

   Sekisui House announced that part of the email data it sent may have leaked. It used an email misdelivery prevention service on this service. [9]

9. 2023-03-08

   Tokio Marine & Nichido Fire Insurance and Tokio Marine & Nichido Life Insurance announced that part of the emails they sent through an email misdelivery prevention service on this service may have leaked. They identified about 1,300 emails from May 16 to December 9, 2022, the period for which logs exist. [10]

10. 2023-03-10

    Kyocera announced that part of the email data (email addresses, names and others) sent and received through this service may have leaked. [11]

11. 2023-03-17

    Iwatsu Electric announced that within what logs can identify there was no possibility of a leak, but that email communication data from the period without logs may have leaked. [12]

12. 2023-03-20

    Goldwin Trading, a Goldwin group company, announced that members' names and email addresses may have leaked from the member management system of the "Goldwin Family Sale". [2] [13]

13. 2023-03-31

    Fujitsu published the specific security strengthening and recurrence prevention measures that follow from the investigation result. [14]

14. 2023-04-28

    Sekisui House published a second report. It examined the email data of July 6, November 7 and November 8, 2022, the days on which unauthorized communication could be confirmed, and identified emails containing personal data. It will notify the people concerned in turn. No leak or misuse of personal data in the email data has been confirmed. [15] [16]

15. 2023-06-15

    Tokio Marine Holdings published a notice on the same case that its subsidiaries announced on March 8. [17] [18]

Fujitsu's investigation found the cause: a program that steals the account data of Fujitsu service operators who logged in to the devices was running, and the stolen accounts were misused. Companies that used the service announced the impact one after another. In most cases the data of emails sent and received (email addresses, names and others) could be stolen from outside, and most of the companies could not confirm whether it actually leaked. [5] [9] [10] [11]