> JapanHacked_
[Contained][Severity: Major][Intrusion]

Kyodo News: unauthorized access to server equipment may have leaked personal data of 4,313 staff and others

On July 22 it noticed suspicious behavior on a server. Names, hashed passwords and other data of 4,313 staff and contractors, including group companies, may have leaked.

Disclosed

2023-11-02

Organizations involved

1

Leaked or at risk

4.3K

4,313

Downtime

Unknown

What happened

  1. It noticed suspicious behavior on a server, reported to the Personal Information Protection Commission and asked an outside specialist firm to investigate. [1] [2]

  2. It announced the case. No clear evidence of personal data flowing out was found, but because a leak is hard to rule out completely, it is informing the people concerned on its website and by email and other means. [1] [2] [3]

Impact

Names, user IDs, employee numbers, company names, departments and titles, email addresses and hashed passwords of 4,313 employees and contractors of Kyodo News and group companies (including some retirees and former staff) may have leaked. The server that was accessed held no information on newsgathering. No secondary damage has been confirmed. [1] [2]

Timeline

  1. Detected 2023-07-22
  2. Disclosed 2023-11-02
  3. 103 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][E-mail address][Employment][Passwords]

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによる職員等の個人情報漏えいの恐れのお知らせとおわびKyodo News · 2023-11-02
  2. [2][News]共同通信に不正アクセス 職員ら4313人情報漏洩恐れNikkei · 2023-11-02
  3. [3][News]共同通信に不正アクセス、職員の個人情報が外部流出した可能性を完全に否定することができずScanNetSecurity · 2023-11-13 08:05