Bristol-Myers Squibb K.K.: a flaw in "MOVEit" was exploited and data of healthcare professionals and former staff may have leaked

1. 2023-05-31

   It was warned by Progress Software that a serious flaw had been found in the file transfer software "MOVEit", which it uses to share information with third parties, and that stored data might have been accessed without authorization. It asked an outside forensic firm to investigate, and its Japanese unit reported to the Personal Information Protection Commission. [1] [2]

2. 2023-08-29

   It announced the case. The investigation found that unauthorized access to the "MOVEit" server was the cause of the leak. [1] [2]

Data that may have leaked is the name, employer, employer address, employer phone number, email address, occupation and hashed password of people who registered an account on its healthcare professional sites between June 13, 2018 and May 31, 2023 and others, and the name, birth date, gender, address, phone number, business email address and employment records of people who were at its Japanese unit between February 28, 2014 and May 31, 2023. Credit card data and My Number data are not at risk. The count has not been published. [1]