Zeon: unauthorized access to server equipment may have leaked 13,434 personal data records of customers, partners and staff

It detected an attack on server equipment on August 16. Traces of unauthorized access to its account management system were found, and 13,434 personal data records may have leaked.

Disclosed

2023-08-23

Organizations involved

Leaked or at risk

13.4K

13,434

Downtime

Unknown

What happened

2023-08-16
It detected an external attack on server equipment used by the company and its group companies. It contacted the maintenance vendor and cut the equipment off from the network the same day. [1] [2]
2023-08-22
It reported to the Personal Information Protection Commission. [1]
2023-08-23
It announced the case. An investigation with a security vendor found traces of unauthorized access to its account management system (directory server). No leak from other servers has been confirmed. It has been notifying the people concerned by email since August 24. [1] [2]

Impact

A total of 13,434 records may have leaked: 8,236 records of customers and business partners registered in group addresses (email addresses, names and so on) and 5,198 account records of employees and contractor staff (user ID, email address, name, company, department, organization code, employee number, phone number and so on). No misuse has been confirmed. [1] [2]