Shogakukan: a director's company phone was accessed after a fake courier SMS and 302 personal data records may have leaked

1. 2023-04-04

   An SMS pretending to be from a courier reached the company-issued smartphone used by a director. Taking it for a real notice of absence, the director entered the account and password. A notification that later appeared on the phone showed that a third party had accessed it. [1] [2]

2. 2023-04-07

   It reported to the Personal Information Protection Commission and consulted the police. [1] [2]

3. 2023-04-25

   It announced the case on its official site. [1] [2]

Those at risk are 302 records of names, phone numbers and email addresses (some with addresses and company names) registered on that phone. Confidential information such as reader surveys and the personal data of "Shogakukan ID" are kept in separate systems and did not leak. It contacted and apologized to the people concerned individually. No harm has been reported. [1] [2]