> JapanHacked_
[Contained][Severity: Major][Intrusion]

Recruit: unauthorized access to a trial SUUMO server, and 1,313 staff names in Roman letters leaked

A server for a trial real estate agent service in some SUUMO areas was accessed without authorization, and 1,313 staff members' names in Roman letters leaked.

Disclosed

2024-07-16

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It detected unauthorized access by a third party to the server of a trial service for real estate agents that SUUMO offers in some areas. It stopped the system and investigated, and found that staff data had leaked. [1] [2]

  2. It announced the case, saying no leak of user or client data was confirmed. [1] [3]

Impact

The data is 1,313 names in Roman letters of employees of the company and its contractors (including retirees and people who left their posts) who worked on developing and maintaining housing-area services since 2007. No secondary harm was confirmed. [1] [2]

Timeline

  1. Detected 2024-07-09
  2. Disclosed 2024-07-16
  3. 7 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name]

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによる従業者等の情報漏えいに関するお知らせとお詫びRecruit Co., Ltd. · 2024-07-16
  2. [2][News]リクルートが不正アクセス受ける、従業者のローマ字氏名が1313件漏洩Nikkei XTECH · 2024-07-16
  3. [3][News]リクルートが実証実験中の不動産会社向けサービスのサーバに不正アクセス、従業者等の情報が漏えいScanNetSecurity · 2024-07-22 08:05