BIGMOTOR: unauthorized access to its website, and personal data of about seven years of inquiry form users may have leaked
It confirmed unauthorized access to its website on August 18. Names, addresses and other data of inquiry form users from November 2016 to August 2023 may have leaked.
Disclosed
2023-10-30
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It confirmed unauthorized access to its website from a third party. It found that the servers behind the site held personal data of inquiry form users and that a leak was possible. With outside experts it deleted all personal data stored on the servers and stopped part of the site, including the inquiry form. [1]
It announced the case. It has reported to the Personal Information Protection Commission and consulted the police. [1] [2] [3]
Impact
Names, addresses, phone numbers, email addresses and similar data of people who used the inquiry form between November 2016 and August 2023 may have leaked. The form does not collect credit card data or My Number. Customer data is kept in a separate system and is out of scope. The count has not been published. [1] [2]
Timeline
- Started, Detected 2023-08-18
- Disclosed 2023-10-30
- 73 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, ChiyodaWholesale and retail trade
BALM Co., Ltd.
Sources
- [1][Official]不正アクセスによる個人情報漏えいの可能性に関するお詫びとお知らせBIGMOTOR Co., Ltd. · 2023-10-30
- [2][News]ビッグモーターに不正アクセス、個人情報漏えいか フォームからの問い合わせ、約7年分ITmedia NEWS · 2023-10-30
- [3][News]ビッグモーターのウェブサイトに不正アクセス、約 7 年間の問合せフォーム利用者の個人情報等漏えいScanNetSecurity · 2023-11-07 08:05