> JapanHacked_
[Investigating][Severity: Major][Intrusion]

Rokkasho Genen Kikaku: a PC holding visitors' personal data was accessed without authorization and data of 4,982 people may have leaked

Unknown files were found on a PC on February 19, and the names and addresses of 4,982 people who applied for tours may have leaked.

Disclosed

2023-03-03

Organizations involved

3

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It found unknown files created on a PC that stores visitors' personal data. It cut the network. [1]

  2. An investigation led it to judge that personal data may have leaked. [1]

  3. It announced the case after notifying the police and reporting to the Personal Information Protection Commission. [1] [2]

  4. Japan Nuclear Fuel and J-Tech announced that personal data of business partner contacts and employees, including former ones, may also have leaked at the group company J-Tech, which uses the same shared system. As with Genen Kikaku, they believe a third party broke into the system with malware. They notified the police and reported to the Personal Information Protection Commission. The result of an outside forensic investigation was also presented for the Genen Kikaku data. [3] [4]

Impact

The names, addresses, phone numbers, birth dates, copies of ID documents and other data of 4,982 people who applied for tours from June 3, 2022 to February 19, 2023 may have leaked. The cause is under investigation. The people concerned are being told by phone and other means through the groups that applied. [1] [2]

Timeline

  1. Started 2022-06-03
  2. Detected 2023-02-19
  3. Disclosed 2023-03-03
  4. 273 days

Organizations involved

Open in organization search

Sources

  1. [1][Official]お客さまの個人情報漏えいの可能性のお知らせとお詫びについて - 2023年3月3日 | 発表・お知らせ > プレスリリース - 日本原燃株式会社Japan Nuclear Fuel Limited · 2023-03-03
  2. [2][News]日本原燃グループ会社のPCに不正アクセス、約5,000人の個人情報漏えいScanNetSecurity · 2023-03-09 08:05
  3. [3][Official]お取引先関係者様等の個人情報漏えいの可能性のお知らせとお詫びについてJapan Nuclear Fuel Limited and J-Tech Co., Ltd. · 2023-08-03
  4. [4][News]同じシステム使用する別の日本原燃グループ会社に不正アクセス、約1万人の個人情報漏えいの可能性ScanNetSecurity · 2023-08-26 08:05