> JapanHacked_
[Investigating][Severity: Major][Intrusion]

Gantan Beauty Industry: unauthorized access to its servers, and data of staff, partner firms and customers may have leaked

Its servers were attacked and a suspicious program ran. Data on staff, partners and customers, such as names and addresses, may have leaked. No count was given.

Disclosed

2024-05-27

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It found a third-party attack on its servers and a suspicious program running. It took steps to stop the damage from spreading and, from the next day, investigated with external specialists. [1]

  2. Investigation confirmed that information may have leaked. Until May 17 no trace of a leak had been found. [1] [3]

  3. It reported to the Personal Information Protection Commission as a "risk of leak". [1]

  4. It announced the case, saying it had no reports of misuse. [1] [2]

Impact

The data that may have leaked is staff names, addresses, phone numbers and email addresses; partner firms' company names, names, addresses and phone numbers; and customers' names, addresses and email addresses. The number of people was not stated. [1]

Timeline

  1. Started, Detected 2024-03-20
  2. Disclosed 2024-05-27
  3. 68 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address][Phone number][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][Official]弊社サーバーへの不正アクセスによる被害および個人情報漏洩の可能性についてGantan Beauty Industry Co., Ltd. · 2024-05-27
  2. [2][News]サーバーが不正アクセス受け不審プログラム実行、漏えい懸念も│元旦ビューティ工業Cybersecurity.jp · 2024-06-03
  3. [3][News]元旦ビューティ工業のサーバに不正アクセス、5月20日に漏えいの可能性を確認し個人情報保護委員会に報告ScanNetSecurity · 2024-06-05 08:05