> JapanHacked_
[Contained][Severity: Major][Insider]

JSB: an employee took about 29,000 customer records from the customer management system and leaked them to third parties

An employee logged in improperly to the customer system, took about 29,000 customer records and leaked them to third parties, who used them for sales calls.

Disclosed

2023-01-25

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Customers began to report calls soliciting water servers and similar (33 cases). [1] [2]

  2. An internal investigation found that a leak was likely. [1]

  3. It reported to the supervising authority and the police. [1]

  4. It announced the case. [1] [2]

  5. The employee admitted to taking the data. [1]

  6. It published an additional report. [1] [2]

Impact

The employee logged in improperly to the customer management system, extracted about 29,000 customer records and leaked them to third parties, who used them to solicit water servers, electricity and internet lines. Sensitive data, card data and bank account data are not included. [1] [2]

Timeline

  1. Started, Detected 2023-01-10
  2. Disclosed 2023-01-25
  3. 15 days

Attack or cause

Method
[Insider]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社従業員によるご契約者様等の個人情報の漏洩に関する追加のご報告についてJSB Co., Ltd. · 2023-02-02
  2. [2][News]東証プライム従業員が顧客情報持ち出し第三者に漏えい、ウォーターサーバー勧誘等に悪用されるScanNetSecurity · 2023-02-08 08:05