BELLSYSTEM24: unauthorized access to its Vietnamese subsidiary's servers, and client companies' customer data may have leaked
Servers of its Vietnamese subsidiary were accessed without authorization. A follow-up said customer data held for some clients' call center work may have leaked.
Disclosed
2024-06-21
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Unauthorized access to servers used by the Vietnamese subsidiary was found. [1]
The parent company announced the case and said it was investigating the extent. [2]
It published a follow-up. It said it had shut down the affected servers and kept working separated from the area that handles client companies' data. Investigation found that customer data it holds for call center work for some client companies may have leaked, and it had started coordinating with those companies. [1] [3]
Timeline
- Detected 2024-06-17
- Disclosed 2024-06-21
- 4 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Major]Tokyo, MinatoOther services
BELLSYSTEM24 Holdings, Inc.The servers hit belong to the Vietnamese subsidiary BELLSYSTEM24 VIETNAM. The parent company made the announcements.
Sources
- [1][Official]海外子会社のシステムに対する不正アクセスについて(続報)BELLSYSTEM24 Holdings, Inc. · 2024-07-11
- [2][News]ベルシステム24 のベトナム子会社に不正アクセス、影響範囲を調査ScanNetSecurity · 2024-07-03 08:05
- [3][News]ベルシステム24 のベトナム子会社に不正アクセス、コールセンター受託業務での顧客情報漏えいの可能性ScanNetSecurity · 2024-07-24 08:05