> JapanHacked_
[Investigating][Severity: Major][Intrusion]

PAL GROUP: unauthorized access to multiple servers, and staff names and salary bank accounts may have leaked

Investigating a system failure, it found unauthorized access to multiple servers. Names, addresses and salary bank account numbers of current and former staff may have leaked.

Disclosed

2024-06-28

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. A system failure occurred. [1]

  2. It reported to the Personal Information Protection Commission. [1]

  3. It announced the case. It said the investigation of the failure confirmed unauthorized access to multiple group servers. All stores and online sales were open as usual, and member data was not leaked because it runs on a separate system. The next-day reflection of points granted stopped working. [1] [2]

Impact

The data that may have leaked is names, addresses, salary bank account numbers and email addresses of current and former officers and employees, and injury and illness information of employees on leave. [1]

Timeline

  1. Started, Detected 2024-06-16
  2. Disclosed 2024-06-28
  3. 12 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address][Bank account][E-mail address][Health data]

Organizations involved

Open in organization search

Sources

  1. [1][Official]サーバートラブルの発生に関するお知らせPAL GROUP Holdings CO., LTD. · 2024-06-28
  2. [2][News]パルグループのサーバに不正アクセス、ポイント反映に影響ScanNetSecurity · 2024-07-12 08:05