Kyodo News: unauthorized access to server equipment may have leaked personal data of 4,313 staff and others
On July 22 it noticed suspicious behavior on a server. Names, hashed passwords and other data of 4,313 staff and contractors, including group companies, may have leaked.
Disclosed
2023-11-02
Organizations involved
1
Leaked or at risk
4.3K
4,313
Downtime
Unknown
What happened
It noticed suspicious behavior on a server, reported to the Personal Information Protection Commission and asked an outside specialist firm to investigate. [1] [2]
It announced the case. No clear evidence of personal data flowing out was found, but because a leak is hard to rule out completely, it is informing the people concerned on its website and by email and other means. [1] [2] [3]
Impact
Names, user IDs, employee numbers, company names, departments and titles, email addresses and hashed passwords of 4,313 employees and contractors of Kyodo News and group companies (including some retirees and former staff) may have leaked. The server that was accessed held no information on newsgathering. No secondary damage has been confirmed. [1] [2]
Timeline
- Detected 2023-07-22
- Disclosed 2023-11-02
- 103 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, MinatoInformation and communications4,313 leaked
Kyodo News
Sources
- [1][Official]不正アクセスによる職員等の個人情報漏えいの恐れのお知らせとおわびKyodo News · 2023-11-02
- [2][News]共同通信に不正アクセス 職員ら4313人情報漏洩恐れNikkei · 2023-11-02
- [3][News]共同通信に不正アクセス、職員の個人情報が外部流出した可能性を完全に否定することができずScanNetSecurity · 2023-11-13 08:05