Wood Friends: malicious programs were placed on its corporate site and others, and entered personal data may have leaked
Rights in its site management system were changed without authorization in November 2022, and malicious programs were found on three sites in February. Data may have leaked.
Disclosed
2023-02-21
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
The management system of the corporate site became unusable, and it found that access rights had been changed without authorization. [1]
An investigation by an outside specialist found malicious programs on three sites: the Wood Friends corporate site, Nagoyako Golf Club and Shinrin Koen Golf Course. [1]
It announced the case. [1]
Impact
On two of the three sites, the Wood Friends corporate site and Nagoyako Golf Club, personal data entered on the site may have leaked. On Shinrin Koen Golf Course there was unauthorized access only. The numbers and items are in the images of the announcement and are not shown in the article. [1]
Timeline
- Started, Detected 2022-11-25
- Disclosed 2023-02-21
- 88 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Major]Aichi, Nagoya, Naka-kuConstruction
WOOD FRIENDS Co., Ltd.
Sources
- [1][News]ゴルフ場運営ウッドフレンズ運営の3サイトに不正アクセス、個人情報が漏えいScanNetSecurity · 2023-03-24 08:05