> JapanHacked_
[Contained][Severity: Major][Intrusion]

NHK: unauthorized access to business servers at its Broadcasting Center may have leaked account data of 23,435 staff and others

On July 31 it learned of a possible compromise. Names, email addresses and other data of 23,435 employees, staff and contractors may have leaked.

Disclosed

2023-09-26

Organizations involved

1

Leaked or at risk

23.4K

23,435

Downtime

Unknown

What happened

  1. It learned that business server equipment at the Broadcasting Center in Shibuya, Tokyo, may have been compromised by unauthorized access from outside. It reported to the Personal Information Protection Commission at once and asked an outside investigation firm to help. [1] [2]

  2. It announced the case. The investigation ended, and it was told that no clear evidence of personal data flowing out was found. Because a leak cannot be ruled out completely, it is notifying the people concerned by email and other means in turn. [1] [2]

Impact

Account data of 23,435 NHK employees, staff and contractors may have leaked: name, email address, department and title, extension number, user ID and hashed password. The server that was accessed held no subscriber information or information on newsgathering. No secondary damage has been confirmed. [1] [2]

Timeline

  1. Detected 2023-07-31
  2. Disclosed 2023-09-26
  3. 57 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][E-mail address][Employment][Passwords]

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによるNHK従業者等の個人情報漏えいのおそれについてNHK (Japan Broadcasting Corporation) · 2023-09-26
  2. [2][News]NHK放送センターに不正アクセス、従業者等個人情報漏えいの可能性を完全に否定することは難しいScanNetSecurity · 2023-09-29 08:05