> JapanHacked_
[Investigating][Severity: Critical][Intrusion]

J:COM: the access log server of a mobile app of its mesh Wi-Fi provider's partner was breached and personal data of about 230,000 customers leaked

Through a breach of a partner app server of US firm Plume, names of 226,832 J:COM mesh Wi-Fi users and others leaked. It came to light on November 21.

Disclosed

2023-11-22

Organizations involved

1

Leaked or at risk

231.9K

231,941

Downtime

Unknown

What happened

  1. Through a Plume sales agent it was told that the access log server of a mobile app of a partner of Plume Design, which supplies the mesh Wi-Fi, had been accessed without authorization from outside. [1]

  2. It announced the case. It says it will notify the customers concerned in turn as soon as it is ready. [1] [2]

Impact

The leak covers 226,832 customers who used the J:COM mesh Wi-Fi app (name) and 5,109 customers of cable TV operators to which J:COM provides mesh Wi-Fi (name and email address). [1] [2]

Timeline

  1. Detected 2023-11-21
  2. Disclosed 2023-11-22
  3. 1 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Supplier

Data exposed or at risk

[Name][E-mail address]

Supply chain

[Breached]

Organizations listed on this site
1

Organizations involved

  • [Through a supplier][Critical]Tokyo, MinatoInformation and communications231,941 leaked

    JCOM Co., Ltd.

    The access log server of a mobile app of a partner of US firm Plume Design, which supplies the mesh Wi-Fi, was breached.

Open in organization search

Sources

  1. [1][Official]お客さまの個人情報漏えいに関するお知らせとお詫びJCOM Co., Ltd. · 2023-11-22
  2. [2][News]JCOM メッシュWi-Fi 提供元のモバイルアプリへ不正アクセス、顧客の個人情報が漏えいScanNetSecurity · 2023-11-29 08:05