> JapanHacked_
[Contained][Severity: Major][Intrusion]

BIGMOTOR: unauthorized access to its website, and personal data of about seven years of inquiry form users may have leaked

It confirmed unauthorized access to its website on August 18. Names, addresses and other data of inquiry form users from November 2016 to August 2023 may have leaked.

Disclosed

2023-10-30

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It confirmed unauthorized access to its website from a third party. It found that the servers behind the site held personal data of inquiry form users and that a leak was possible. With outside experts it deleted all personal data stored on the servers and stopped part of the site, including the inquiry form. [1]

  2. It announced the case. It has reported to the Personal Information Protection Commission and consulted the police. [1] [2] [3]

Impact

Names, addresses, phone numbers, email addresses and similar data of people who used the inquiry form between November 2016 and August 2023 may have leaked. The form does not collect credit card data or My Number. Customer data is kept in a separate system and is out of scope. The count has not been published. [1] [2]

Timeline

  1. Started, Detected 2023-08-18
  2. Disclosed 2023-10-30
  3. 73 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address][Phone number][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによる個人情報漏えいの可能性に関するお詫びとお知らせBIGMOTOR Co., Ltd. · 2023-10-30
  2. [2][News]ビッグモーターに不正アクセス、個人情報漏えいか フォームからの問い合わせ、約7年分ITmedia NEWS · 2023-10-30
  3. [3][News]ビッグモーターのウェブサイトに不正アクセス、約 7 年間の問合せフォーム利用者の個人情報等漏えいScanNetSecurity · 2023-11-07 08:05