Gantan Beauty Industry: unauthorized access to its servers, and data of staff, partner firms and customers may have leaked
Its servers were attacked and a suspicious program ran. Data on staff, partners and customers, such as names and addresses, may have leaked. No count was given.
Disclosed
2024-05-27
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It found a third-party attack on its servers and a suspicious program running. It took steps to stop the damage from spreading and, from the next day, investigated with external specialists. [1]
Investigation confirmed that information may have leaked. Until May 17 no trace of a leak had been found. [1] [3]
It reported to the Personal Information Protection Commission as a "risk of leak". [1]
It announced the case, saying it had no reports of misuse. [1] [2]
Impact
The data that may have leaked is staff names, addresses, phone numbers and email addresses; partner firms' company names, names, addresses and phone numbers; and customers' names, addresses and email addresses. The number of people was not stated. [1]
Timeline
- Started, Detected 2024-03-20
- Disclosed 2024-05-27
- 68 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Kanagawa, FujisawaManufacturing
Gantan Beauty Industry Co., Ltd.
Sources
- [1][Official]弊社サーバーへの不正アクセスによる被害および個人情報漏洩の可能性についてGantan Beauty Industry Co., Ltd. · 2024-05-27
- [2][News]サーバーが不正アクセス受け不審プログラム実行、漏えい懸念も│元旦ビューティ工業Cybersecurity.jp · 2024-06-03
- [3][News]元旦ビューティ工業のサーバに不正アクセス、5月20日に漏えいの可能性を確認し個人情報保護委員会に報告ScanNetSecurity · 2024-06-05 08:05