en: a credential stuffing attack hit "en tenshoku" and the web résumés of 255,765 users may have been accessed

1. 2023-03-20

   Spoofed logins using IDs (email addresses) and passwords thought to have been obtained from outside began. They went on until the 27th. [1] [2]

2. 2023-03-27

   It confirmed unauthorized logins on the web server of "en tenshoku". The same day it blocked traffic from the source IP addresses that had been attempting the logins. [1]

3. 2023-03-30

   At 15:00 it reset the passwords of all users. It announced the case, and had also notified the police and reported to the Personal Information Protection Commission. [1] [2]

The web résumés of 255,765 people (excluding those who left) among users registered from 2000 to now may have been accessed. No reports of misuse of personal data have been confirmed. [1] [2]