[Investigating][Severity: Major][Intrusion]

TOHO Chemical Industry: servers in its data center were accessed without authorization and the core and related systems were also damaged

Servers in its data center were accessed on February 26, and a leak of personal data of shareholders, former employees and others was confirmed.

Disclosed

2023-02-28

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2023-02-26
It confirmed that servers in its data center had been accessed by a third party. To stop the damage from spreading it shut the servers down and cut the network. [1] [2]
2023-02-28
It announced the case. [1] [2]
2023-04-26
It announced that an investigation by outside security experts confirmed that part of the information it holds had leaked. The experts pointed out that a server vulnerability was targeted. The internet connection remains cut off, and the core system and internal network are being restored in turn. [3] [4]

Impact

The core system and related systems were also damaged. With advice from outside experts it is investigating the range and information accessed and whether any data leaked, and expects it to take some time to understand the whole picture. [1] [2]

Personal data that may have leaked covers shareholders and former shareholders (name, address, shares held), business partner contacts (name, company, department, title, company address, business phone, fax and email), applicants to its recruitment exams (name, school, faculty, address, phone, email) and former employees (name, address, family information, salary account number, social insurance number including My Number and others). Business-related information is also being analyzed. No secondary damage has been reported. [3] [4]