Rokkasho Genen Kikaku: a PC holding visitors' personal data was accessed without authorization and data of 4,982 people may have leaked
Unknown files were found on a PC on February 19, and the names and addresses of 4,982 people who applied for tours may have leaked.
Disclosed
2023-03-03
Organizations involved
3
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It found unknown files created on a PC that stores visitors' personal data. It cut the network. [1]
An investigation led it to judge that personal data may have leaked. [1]
It announced the case after notifying the police and reporting to the Personal Information Protection Commission. [1] [2]
Japan Nuclear Fuel and J-Tech announced that personal data of business partner contacts and employees, including former ones, may also have leaked at the group company J-Tech, which uses the same shared system. As with Genen Kikaku, they believe a third party broke into the system with malware. They notified the police and reported to the Personal Information Protection Commission. The result of an outside forensic investigation was also presented for the Genen Kikaku data. [3] [4]
Impact
The names, addresses, phone numbers, birth dates, copies of ID documents and other data of 4,982 people who applied for tours from June 3, 2022 to February 19, 2023 may have leaked. The cause is under investigation. The people concerned are being told by phone and other means through the groups that applied. [1] [2]
Timeline
- Started 2022-06-03
- Detected 2023-02-19
- Disclosed 2023-03-03
- 273 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Aomori, RokkashoOther services10,000 leaked
J-Tech Co., Ltd.A group company using the same shared system. Personal data of business partner contacts and employees may have leaked.
[Breached][Major]Aomori, RokkashoManufacturing
Japan Nuclear Fuel LimitedRokkasho Genen Kikaku is contracted to receive visitors for Japan Nuclear Fuel. The announcement was made jointly by both companies.
[Breached][Major]Aomori, RokkashoOther services4,982 leaked
Rokkasho Genen Kikaku Co., Ltd.
Sources
- [1][Official]お客さまの個人情報漏えいの可能性のお知らせとお詫びについて - 2023年3月3日 | 発表・お知らせ > プレスリリース - 日本原燃株式会社Japan Nuclear Fuel Limited · 2023-03-03
- [2][News]日本原燃グループ会社のPCに不正アクセス、約5,000人の個人情報漏えいScanNetSecurity · 2023-03-09 08:05
- [3][Official]お取引先関係者様等の個人情報漏えいの可能性のお知らせとお詫びについてJapan Nuclear Fuel Limited and J-Tech Co., Ltd. · 2023-08-03
- [4][News]同じシステム使用する別の日本原燃グループ会社に不正アクセス、約1万人の個人情報漏えいの可能性ScanNetSecurity · 2023-08-26 08:05