Daikin Industries: a third-tier subcontractor worker downloaded about 22,000 supplier contact records
A worker at a third-tier subcontractor downloaded about 22,000 supplier contact records for private use. No trace of leakage to third parties was found.
Disclosed
2024-02-16
Organizations involved
1
Leaked or at risk
22K
22,000
Downtime
Unknown
What happened
It detected unauthorized downloads by a worker at a company contracted by NEC, which was subcontracted by its contractor Daikin Information Systems (a third-tier subcontractor). It collected all of the worker's devices and examined them. [1]
It finished the detailed investigation and announced the case. No trace of leakage from the worker to third parties was found, and no secondary harm was confirmed. [1] [2]
Impact
The downloaded data was the names, addresses, phone numbers and bank transfer details of supplier contacts of Daikin Industries and its domestic affiliates, about 22,000 records. It gave the worker's private-purpose download as the cause. [1]
Timeline
- Started, Detected 2023-12-24
- Disclosed 2024-02-16
- 54 days
Attack or cause
- Method
- [Insider]
- Impact
- [Data leak]
- Entry point
- Supplier
Data exposed or at risk
Organizations involved
[Breached][Major]Osaka, Osaka, Kita-kuManufacturing22,000 leaked
Daikin Industries, Ltd.
Sources
- [1][Official]仕入先様情報の漏洩可能性に関するお詫びとお知らせについてDaikin Industries, Ltd. · 2024-02-16
- [2][News]ダイキン工業の再々委託先の作業者が仕入先情報を不正にダウンロードScanNetSecurity · 2024-02-27 08:05