> JapanHacked_
[Contained][Severity: Major][Insider]

Daikin Industries: a third-tier subcontractor worker downloaded about 22,000 supplier contact records

A worker at a third-tier subcontractor downloaded about 22,000 supplier contact records for private use. No trace of leakage to third parties was found.

Disclosed

2024-02-16

Organizations involved

1

Leaked or at risk

22K

22,000

Downtime

Unknown

What happened

  1. It detected unauthorized downloads by a worker at a company contracted by NEC, which was subcontracted by its contractor Daikin Information Systems (a third-tier subcontractor). It collected all of the worker's devices and examined them. [1]

  2. It finished the detailed investigation and announced the case. No trace of leakage from the worker to third parties was found, and no secondary harm was confirmed. [1] [2]

Impact

The downloaded data was the names, addresses, phone numbers and bank transfer details of supplier contacts of Daikin Industries and its domestic affiliates, about 22,000 records. It gave the worker's private-purpose download as the cause. [1]

Timeline

  1. Started, Detected 2023-12-24
  2. Disclosed 2024-02-16
  3. 54 days

Attack or cause

Method
[Insider]
Impact
[Data leak]
Entry point
Supplier

Data exposed or at risk

[Name][Postal address][Phone number][Bank account]

Organizations involved

Open in organization search

Sources

  1. [1][Official]仕入先様情報の漏洩可能性に関するお詫びとお知らせについてDaikin Industries, Ltd. · 2024-02-16
  2. [2][News]ダイキン工業の再々委託先の作業者が仕入先情報を不正にダウンロードScanNetSecurity · 2024-02-27 08:05