Mazda: unauthorized access to server equipment may have leaked 104,732 account records of staff and partner contacts
It detected improper traffic via a server on July 24. A directory server was breached, and names and other data of staff and partners may have leaked. No customer data was held.
Disclosed
2023-09-15
Organizations involved
1
Leaked or at risk
104.7K
104,732
Downtime
Unknown
What happened
It detected improper traffic via server equipment and cut it off from the network at once. [1] [2]
It announced the case. An outside expert investigation found traces of unauthorized access to the directory server that manages account data, showing that part of the personal data may have leaked. [1] [2] [3]
Impact
Account data of 104,732 people may have leaked: staff of Mazda and group companies, staff of partner companies and contacts at business partners. It includes user ID, encrypted password, name, email address, company, department and title, and phone number. The server that was accessed held no personal data of customers. No misuse has been confirmed. [1] [2]
Timeline
- Detected 2023-07-24
- Disclosed 2023-09-15
- 53 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Hiroshima, FuchuManufacturing104,732 leaked
Mazda Motor Corporation
Sources
- [1][News]マツダ、不正アクセス発生による個人情報流出可能性について発表Nikkei (Mazda press release) · 2023-09-15
- [2][News]マツダに外部から不正アクセス、10万超のアカウント情報が流出の可能性…7月下旬に痕跡を確認The Yomiuri Shimbun · 2023-09-15
- [3][News]マツダへの不正アクセスで104,732件のアカウント情報が流出した可能性ScanNetSecurity · 2023-10-04 08:05