Tokyu: unauthorized access to its network, and data on subsidiary Toko Shokuhin's file server was read
Tokyu's network was accessed without authorization, and data on the file server of its subsidiary Toko Shokuhin, on the same network, was read. It likely includes customer data.
Disclosed
2024-05-09
Organizations involved
2
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Tokyu confirmed that its network had been accessed without authorization by a third party. [1]
It announced the case. It said suspicious access had read part of the data on the file server of Toko Shokuhin (a Tokyu Store subsidiary), which uses the same network. It had reported to the Personal Information Protection Commission and restricted outside access. [1] [2]
Impact
It said the data read likely includes customers' personal data and that it was investigating with external specialists. The number of people was not stated. [1]
Timeline
- Detected 2024-04-28
- Disclosed 2024-05-09
- 11 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Major]Tokyo, ShibuyaTransport and postal services
Tokyu Corporation[Breached][Major]Tokyo, MeguroWholesale and retail trade
Toko Shokuhin Co., Ltd.
Sources
- [1][Official]ファイルサーバ等への不正アクセス発生についてTokyu Corporation · 2024-05-09
- [2][News]東急のネットワークに不正アクセス、連結子会社のファイルサーバでデータ読み出されるScanNetSecurity · 2024-05-15 08:05