> JapanHacked_
[Contained][Severity: Critical][Intrusion]

Mitsubishi Electric Home Appliance: intrusion also reached a server holding data of about 2.31 million customers

On 5 August 2024 Mitsubishi Electric Home Appliance, a Mitsubishi Electric subsidiary, said an intrusion into its information systems may have leaked personal data. It confirmed the intrusion on 17 April; the investigation found that data of 3,893 employees, former employees and job applicants (names with addresses, phone numbers or email addresses) may have leaked. On 25 July it also found two accesses, of 13 and 12 seconds, to a server holding data of about 2.31 million customers taken from appliance service records. The company cannot rule out that this data was viewed. The same kinds of data are involved, no card data is included, and no misuse had been reported at the time of the announcement. The company's testing considered identifiable viewing during those short access windows extremely unlikely.

Disclosed

2024-08-05

Organizations involved

1

Leaked or at risk

2.3M

2,310,000

Downtime

Unknown

Timeline

  1. Detected 2024-04-17
  2. Disclosed 2024-08-05
  3. 110 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address][Phone number][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社情報システムに対する不正アクセスによる個人情報流出の可能性に関するお知らせとお詫びMitsubishi Electric Home Appliance · 2024-08-05
  2. [2][News]三菱電機ホーム機器の約 231 万名分の顧客情報が保管しているサーバに 13 秒・12 秒と 2 回アクセスScanNetSecurity · 2024-08-16
  3. [3][Research]2024年上場企業の「個人情報漏えい・紛失」事故 過去最多の189件、漏えい情報は1,586万人分TSR · 2025-01-21