> JapanHacked_
[Investigating][Severity: Major][Unknown]

Nissan Car Rental Solutions: unauthorized login to the "e-Share Mobi" car sharing system misused vehicles and may have exposed up to 69,859 records

Someone logged in to the car sharing operations system and misused vehicles. Names, addresses and licence numbers of up to 69,859 members and applicants may have been viewed.

Disclosed

2024-09-02

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It announced the case. It said someone had logged in to the operations system without authorization and used vehicles, and that it could not rule out that some customer data was viewed at login. It filed a damage report with the police and reported to the Personal Information Protection Commission. The police were said to be investigating the course of events. [1] [2]

Impact

The information that may have been viewed is that of people who became members or applied to join between August 1, 2023 and July 9, 2024, up to 69,859 records: names, birth dates, genders, addresses, phone numbers, email addresses, driving licence numbers, categories, issue dates, expiry dates and emergency contacts. Credit card data and passwords were not stored on this system. [1]

Timeline

  1. Detected, Disclosed 2024-09-02
  2. 1 days

Attack or cause

Method
[Unknown]
Impact
[Data leak][Fraud]
Entry point
Unknown

Data exposed or at risk

[Name][Date of birth][Gender][Postal address][Phone number][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]日産のカーシェア「e-シェアモビ」不正ログインで車両不正利用 最大約7万件の個人情報閲覧された可能性ITmedia NEWS · 2024-09-03
  2. [2][News]「NISSAN e-シェアモビ」に不正ログインし車両利用、個人情報閲覧された可能性もScanNetSecurity · 2024-09-10 08:05