NTT Docomo: customer data of up to about 5.29 million records may have leaked from a PC of a company it outsources "plala" and "Hikari TV" work to
On March 30 a former temporary worker at a contractor took out customer data of "plala" and "Hikari TV". About 5.96 million records.
Disclosed
2023-03-31
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
At about 13:40 network monitoring showed that customer data of "plala" and "Hikari TV" may have leaked from a PC the contractor uses for its work. The PC thought to be the source was isolated from the network. [1] [2]
It published a follow-up. A former temporary worker at its contractor NTT Nexia had accessed a personally contracted external storage service from a work PC and taken out business information including customer data on March 30. The count, earlier given as up to about 5.29 million, turned out to be about 5.96 million (1.65 million for "plala" and 4.31 million for "Hikari TV"). No access to the external storage by a third party or misuse has been confirmed. [3] [4]
Impact
The data that may have leaked is customer data of the consumer ISP "plala" and "Hikari TV", up to about 5,290,000 records. It includes name, address, phone number, email address, birth date, FLET'S line ID and customer number. Credit card data and bank account data are not included. No misuse has been confirmed. [1] [2]
Timeline
- Started, Detected 2023-03-30
- Disclosed 2023-03-31
- 1 days
Attack or cause
- Method
- [Unknown]
- Impact
- [Data leak]
- Entry point
- Supplier
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, ChiyodaInformation and communications5,960,000 leaked
NTT DOCOMO, Inc.The PC of a company it outsources work on "plala", "Hikari TV" and others to was hit. The contractor is not named.
Sources
- [1][Official]ドコモからのお知らせ : 【お詫び】「ぷらら」及び「ひかりTV」などをご利用のお客さまの個人情報流出の可能性のお知らせとお詫び | お知らせ | NTTドコモNTT DOCOMO, INC. · 2023-03-31
- [2][News]NTTドコモ「ぷらら」「ひかりTV」業務の委託先パソコンから最大 約529万件の個人情報が流出ScanNetSecurity · 2023-04-04 08:05
- [3][Official]【お詫び】「ぷらら」および「ひかりTV」をご利用のお客さま情報流出のお知らせとお詫びNTT DOCOMO, INC. · 2023-07-21
- [4][News]「ぷらら」「ひかりTV」の顧客情報 約596万件持ち出し ~ NTTドコモの委託先元派遣社員ScanNetSecurity · 2023-07-27 08:05