> JapanHacked_
[Investigating][Severity: Major][Intrusion]

BELLSYSTEM24: unauthorized access to its Vietnamese subsidiary's servers, and client companies' customer data may have leaked

Servers of its Vietnamese subsidiary were accessed without authorization. A follow-up said customer data held for some clients' call center work may have leaked.

Disclosed

2024-06-21

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Unauthorized access to servers used by the Vietnamese subsidiary was found. [1]

  2. The parent company announced the case and said it was investigating the extent. [2]

  3. It published a follow-up. It said it had shut down the affected servers and kept working separated from the area that handles client companies' data. Investigation found that customer data it holds for call center work for some client companies may have leaked, and it had started coordinating with those companies. [1] [3]

Timeline

  1. Detected 2024-06-17
  2. Disclosed 2024-06-21
  3. 4 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]海外子会社のシステムに対する不正アクセスについて(続報)BELLSYSTEM24 Holdings, Inc. · 2024-07-11
  2. [2][News]ベルシステム24 のベトナム子会社に不正アクセス、影響範囲を調査ScanNetSecurity · 2024-07-03 08:05
  3. [3][News]ベルシステム24 のベトナム子会社に不正アクセス、コールセンター受託業務での顧客情報漏えいの可能性ScanNetSecurity · 2024-07-24 08:05