ETC Usage Inquiry Service: mass access from overseas IP addresses, and some accounts were logged in without authorization
From September 30 to October 2 there was mass access from overseas IP addresses, and some accounts whose ID and password matched were logged in. The count has not been published.
Disclosed
2023-10-04
Organizations involved
6
Leaked or at risk
Unknown
Downtime
Unknown
What happened
From this day until October 2, there was mass access to the service from overseas IP addresses, and in some of it the ID and password matched and the account was logged in. [1] [2]
The six operating companies announced the case jointly. They took a measure to block access from an IP address at once if similar mass access occurs, and are notifying the customers concerned individually by email. [1] [2]
Impact
Timeline
- Started 2023-09-30
- Detected 2023-10-02
- Disclosed 2023-10-04
- 4 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Data leak]
- Entry point
- Stolen credentials
Data exposed or at risk
Organizations involved
[Breached][Major]Aichi, Nagoya, Naka-kuTransport and postal services
Central Nippon Expressway Company Limited[Breached][Major]Tokyo, ChiyodaTransport and postal services
East Nippon Expressway Company, Limited[Breached][Major]Osaka, Osaka, Kita-kuTransport and postal services
Hanshin Expressway Company Limited[Breached][Major]Hyogo, Kobe, Chuo-kuTransport and postal services
Honshu-Shikoku Bridge Expressway Company Limited[Breached][Major]Tokyo, ChiyodaTransport and postal services
Metropolitan Expressway Co., Ltd.[Breached][Major]Osaka, Osaka, Kita-kuTransport and postal services
West Nippon Expressway Company Limited
Sources
- [1][Official]ETC利用照会サービスサイトへの不正アクセス・ログインについてのお詫びとお知らせEast Nippon Expressway Co., Ltd. and five other expressway companies · 2023-10-04
- [2][News]「ETC利用照会サービス」が不正ログイン被害、海外 IP アドレスから大量のアクセスScanNetSecurity · 2023-10-16 08:05