Nissan Car Rental Solutions: unauthorized login to the "e-Share Mobi" car sharing system misused vehicles and may have exposed up to 69,859 records
Someone logged in to the car sharing operations system and misused vehicles. Names, addresses and licence numbers of up to 69,859 members and applicants may have been viewed.
Disclosed
2024-09-02
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It announced the case. It said someone had logged in to the operations system without authorization and used vehicles, and that it could not rule out that some customer data was viewed at login. It filed a damage report with the police and reported to the Personal Information Protection Commission. The police were said to be investigating the course of events. [1] [2]
Impact
The information that may have been viewed is that of people who became members or applied to join between August 1, 2023 and July 9, 2024, up to 69,859 records: names, birth dates, genders, addresses, phone numbers, email addresses, driving licence numbers, categories, issue dates, expiry dates and emergency contacts. Credit card data and passwords were not stored on this system. [1]
Timeline
- Detected, Disclosed 2024-09-02
- 1 days
Attack or cause
- Method
- [Unknown]
- Impact
- [Data leak][Fraud]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Kanagawa, Yokohama, Nishi-kuReal estate and rental69,859 leaked
Nissan Car Rental Solutions Co., Ltd.
Sources
- [1][News]日産のカーシェア「e-シェアモビ」不正ログインで車両不正利用 最大約7万件の個人情報閲覧された可能性ITmedia NEWS · 2024-09-03
- [2][News]「NISSAN e-シェアモビ」に不正ログインし車両利用、個人情報閲覧された可能性もScanNetSecurity · 2024-09-10 08:05