Mitsubishi Electric Home Appliance: intrusion also reached a server holding data of about 2.31 million customers
On 5 August 2024 Mitsubishi Electric Home Appliance, a Mitsubishi Electric subsidiary, said an intrusion into its information systems may have leaked personal data. It confirmed the intrusion on 17 April; the investigation found that data of 3,893 employees, former employees and job applicants (names with addresses, phone numbers or email addresses) may have leaked. On 25 July it also found two accesses, of 13 and 12 seconds, to a server holding data of about 2.31 million customers taken from appliance service records. The company cannot rule out that this data was viewed. The same kinds of data are involved, no card data is included, and no misuse had been reported at the time of the announcement. The company's testing considered identifiable viewing during those short access windows extremely unlikely.
Disclosed
2024-08-05
Organizations involved
1
Leaked or at risk
2.3M
2,310,000
Downtime
Unknown
Timeline
- Detected 2024-04-17
- Disclosed 2024-08-05
- 110 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Critical]Saitama, FukayaManufacturing2,310,000 leaked
Mitsubishi Electric Home Appliance Co., Ltd.
Sources
- [1][Official]当社情報システムに対する不正アクセスによる個人情報流出の可能性に関するお知らせとお詫びMitsubishi Electric Home Appliance · 2024-08-05
- [2][News]三菱電機ホーム機器の約 231 万名分の顧客情報が保管しているサーバに 13 秒・12 秒と 2 回アクセスScanNetSecurity · 2024-08-16
- [3][Research]2024年上場企業の「個人情報漏えい・紛失」事故 過去最多の189件、漏えい情報は1,586万人分TSR · 2025-01-21