Kenbiya: database backup accessed; member and inquiry-user data may have been viewed

On 19 September 2024 Kenbiya, a LIFULL group company that runs a real estate investment site, disclosed unauthorized outside access to a database backup stored on its server. It came to light when content it manages behaved abnormally on the morning of 17 September. The backup, never meant to be reachable from outside, had been accessed externally, and 217,953 records may have been viewed: names, addresses, email addresses and phone numbers (encrypted) and hashed passwords of individual members of Kenbiya and LIFULL HOME'S Real Estate Investment, and the IDs and passwords of corporate clients that list properties. A second report on 30 September added 60,153 records of people who had sent inquiries and others. Corporate account passwords were reset as an emergency measure.