Sekisui House: a setting flaw on contractor BIPROGY's cloud development server leaked customer data and put many more at risk

1. 2023-11-06

   It detected suspicious external access to the cloud server of BIPROGY, which develops Sekisui House's design system, stopped the server the same day and began investigating. [1] [2] [3]

2. 2023-11-10

   It confirmed that the development server had a security setting flaw, that information had leaked and that more may have. [1] [2]

3. 2023-11-28

   Sekisui House and BIPROGY each announced the case. [1] [2] [4]

Confirmed leaked are the names, building site addresses and drawings of two customers and the names of 12 staff. At risk are 11,707 customers (name and building site address), 15,682 customers (name only) and the names of 7,184 staff in charge, from data obtained between 2001 and 2023. [1] [3]