Morinaga: unauthorized access to its servers, and 4,882 records of staff and others may have leaked
Its servers were accessed without authorization, and 4,882 records of group staff and contractors, including names, email addresses and internal system IDs, may have leaked.
Disclosed
2024-06-18
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It noticed suspicious behaviour on a server and reported to the Personal Information Protection Commission at once. [1]
It announced the case. It said it had identified and blocked the route of entry and confirmed no secondary harm such as misuse. External specialists were investigating, and no clear evidence of a leak had been found, but a leak could not be ruled out. [1] [2] [3]
Impact
Timeline
- Detected 2024-04-09
- Disclosed 2024-06-18
- 70 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, MinatoManufacturing4,882 leaked
Morinaga & Co., Ltd.
Sources
- [1][Official]不正アクセスによる役職員等の個人情報漏えいのおそれのお知らせとお詫びMorinaga & Company, Ltd. · 2024-06-18
- [2][News]森永製菓、職員など4882件の情報漏えいの可能性 社内システムのIDやハッシュ化パスワードなどITmedia NEWS · 2024-06-19
- [3][News]森永製菓に不正アクセス、役職員等の個人情報漏えいの可能性ScanNetSecurity · 2024-06-27 08:05