Nulab: unauthorized access to the Typetalk log monitoring system may have leaked logs with email addresses and tokens

1. 2023-07-21

   From about 10:34 on July 21 to about 11:30 on August 1 (JST), the Typetalk log monitoring system was accessed without authorization. The logs accessed were access logs and application logs for July 3 to 24. [1] [2]

2. 2023-08-03

   It announced the case. The cause was a firewall change that made the internal log monitoring system reachable from outside. [1] [2]

3. 2023-08-10

   It confirmed that the tokens recorded in the logs showed no suspicious use. [1]

Data that may have leaked is Typetalk users' email addresses, bot tokens and OAuth client credentials. Message contents and passwords are not included. [1] [2]