Casio: a development-environment database of its education app "ClassPad.net" was accessed from outside and customer data in Japan and abroad leaked
A setup error left a development database reachable from outside. Customer data of 91,921 in Japan and 35,049 abroad leaked.
Disclosed
2023-10-18
Organizations involved
1
Leaked or at risk
127K
126,970
Downtime
Unknown
What happened
It noticed a failure of the development-environment database in the evening. [1]
An investigation confirmed that data had leaked abroad. [1]
It reported to the Personal Information Protection Commission and others. [1]
It announced the case. Part of the security settings of the development network had been disabled by an operational error. [1] [2]
Impact
Timeline
- Started, Detected 2023-10-11
- Disclosed 2023-10-18
- 7 days
Attack or cause
- Method
- [Misconfiguration][Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, ShibuyaManufacturing126,970 leaked
Casio Computer Co., Ltd.
Sources
- [1][Official]不正アクセスによる個人情報漏えいのお詫びとご報告Casio Computer Co., Ltd. · 2023-10-18
- [2][News]カシオの ICT教育アプリ「ClassPad.net」開発環境データベースに不正アクセス、国内外の顧客の個人情報漏えいScanNetSecurity · 2023-10-26 08:05