> JapanHacked_
[Contained][Severity: Major][Intrusion]

WORKPORT: unauthorized access to the server of its job-change support site, and member data was posted on an overseas site

The server of its job-change support site was accessed without authorization, and members' names, birth dates, phone numbers and emails were stolen and posted on an overseas site.

Disclosed

2024-06-04

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It learned that customer data might be posted on an overseas site. It checked and found that the posted content contained information matching some of its customer data. The same day it asked an outside firm to investigate. [1] [2]

  2. It announced the case. It said a third party may have accessed the server, placed a malicious file and stolen information. It deleted the file and moved to a new environment. It had reported to the police and the Personal Information Protection Commission. [1] [2]

Impact

Covered are some people who registered between January 1, 2019 and April 19, 2024: names, birth dates, phone numbers, email addresses, password hashes, prefectures of residence, desired work locations and desired job types. The passwords themselves are not included. The number of people was not stated. [1]

Timeline

  1. Detected 2024-04-23
  2. Disclosed 2024-06-04
  3. 42 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Date of birth][Phone number][E-mail address][Passwords]

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社が運営する「転職支援サイト」 への不正アクセスに関するお知らせとお詫びWORKPORT Co., Ltd. · 2024-06-04
  2. [2][News]海外サイトに顧客情報が掲載 ～「転職支援サイト」 に不正アクセスScanNetSecurity · 2024-06-13 08:05