> JapanHacked_
[Contained][Severity: Major][Intrusion]

Mazda: unauthorized access to server equipment may have leaked 104,732 account records of staff and partner contacts

It detected improper traffic via a server on July 24. A directory server was breached, and names and other data of staff and partners may have leaked. No customer data was held.

Disclosed

2023-09-15

Organizations involved

1

Leaked or at risk

104.7K

104,732

Downtime

Unknown

What happened

  1. It detected improper traffic via server equipment and cut it off from the network at once. [1] [2]

  2. It announced the case. An outside expert investigation found traces of unauthorized access to the directory server that manages account data, showing that part of the personal data may have leaked. [1] [2] [3]

Impact

Account data of 104,732 people may have leaked: staff of Mazda and group companies, staff of partner companies and contacts at business partners. It includes user ID, encrypted password, name, email address, company, department and title, and phone number. The server that was accessed held no personal data of customers. No misuse has been confirmed. [1] [2]

Timeline

  1. Detected 2023-07-24
  2. Disclosed 2023-09-15
  3. 53 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][E-mail address][Phone number][Employment][Passwords]

Organizations involved

Open in organization search

Sources

  1. [1][News]マツダ、不正アクセス発生による個人情報流出可能性について発表Nikkei (Mazda press release) · 2023-09-15
  2. [2][News]マツダに外部から不正アクセス、10万超のアカウント情報が流出の可能性…7月下旬に痕跡を確認The Yomiuri Shimbun · 2023-09-15
  3. [3][News]マツダへの不正アクセスで104,732件のアカウント情報が流出した可能性ScanNetSecurity · 2023-10-04 08:05