FUJISOFT: unauthorized access to its internal systems, some internal information may have leaked

1. 2023-09-22

   It confirmed several unauthorized accesses and that some internal information may have leaked. [1] [2]

2. 2023-09-27

   It announced the case. It judges the damage to be minimal. [1] [2]

3. 2023-10-24

   It published the final report. It started with the theft of some employees' account credentials. Six employees' credentials were used to enter internal terminals from outside, and 20 company-made files in the cloud were viewed or downloaded. The attacker also entered an education site for partner companies and tried to install a backdoor, but the SOC detected it and the CSIRT blocked it. [3] [4]

Some internal information may have leaked from the internal systems. The company judges the damage to be minimal. The content and number of items leaked have not been published. [1] [2]

Six employees' accounts were abused and three employees' terminals were compromised. The 20 files viewed or downloaded were all internal working documents and include no material received from or delivered to customers. The cause was that some systems lacked layered defense and some employees used guessable passwords. [3]