NHK: unauthorized access to business servers at its Broadcasting Center may have leaked account data of 23,435 staff and others
On July 31 it learned of a possible compromise. Names, email addresses and other data of 23,435 employees, staff and contractors may have leaked.
Disclosed
2023-09-26
Organizations involved
1
Leaked or at risk
23.4K
23,435
Downtime
Unknown
What happened
It learned that business server equipment at the Broadcasting Center in Shibuya, Tokyo, may have been compromised by unauthorized access from outside. It reported to the Personal Information Protection Commission at once and asked an outside investigation firm to help. [1] [2]
It announced the case. The investigation ended, and it was told that no clear evidence of personal data flowing out was found. Because a leak cannot be ruled out completely, it is notifying the people concerned by email and other means in turn. [1] [2]
Impact
Account data of 23,435 NHK employees, staff and contractors may have leaked: name, email address, department and title, extension number, user ID and hashed password. The server that was accessed held no subscriber information or information on newsgathering. No secondary damage has been confirmed. [1] [2]
Timeline
- Detected 2023-07-31
- Disclosed 2023-09-26
- 57 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, ShibuyaInformation and communications23,435 leaked
NHK (Japan Broadcasting Corporation)
Sources
- [1][Official]不正アクセスによるNHK従業者等の個人情報漏えいのおそれについてNHK (Japan Broadcasting Corporation) · 2023-09-26
- [2][News]NHK放送センターに不正アクセス、従業者等個人情報漏えいの可能性を完全に否定することは難しいScanNetSecurity · 2023-09-29 08:05