> JapanHacked_
[Contained][Severity: Critical][Misconfiguration][Intrusion]

Casio: a development-environment database of its education app "ClassPad.net" was accessed from outside and customer data in Japan and abroad leaked

A setup error left a development database reachable from outside. Customer data of 91,921 in Japan and 35,049 abroad leaked.

Disclosed

2023-10-18

Organizations involved

1

Leaked or at risk

127K

126,970

Downtime

Unknown

What happened

  1. It noticed a failure of the development-environment database in the evening. [1]

  2. An investigation confirmed that data had leaked abroad. [1]

  3. It reported to the Personal Information Protection Commission and others. [1]

  4. It announced the case. Part of the security settings of the development network had been disabled by an operational error. [1] [2]

Impact

Data of 91,921 customers in Japan (individuals and 1,108 educational institutions) and 35,049 abroad (148 countries and regions) leaked: name, email address, country, school, grade, class and ID, purchase information and usage history. No credit card data is included. [1] [2]

Timeline

  1. Started, Detected 2023-10-11
  2. Disclosed 2023-10-18
  3. 7 days

Attack or cause

Method
[Misconfiguration][Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][E-mail address][Education][Purchase history]

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによる個人情報漏えいのお詫びとご報告Casio Computer Co., Ltd. · 2023-10-18
  2. [2][News]カシオの ICT教育アプリ「ClassPad.net」開発環境データベースに不正アクセス、国内外の顧客の個人情報漏えいScanNetSecurity · 2023-10-26 08:05