Sanyo Bussan: unauthorized access encrypted data on multiple servers, and customer, partner and staff personal data may have leaked
On August 27 internal systems became inaccessible, and data on multiple servers had been encrypted. A leak of customer, partner and staff personal data cannot be ruled out.
Disclosed
2024-09-06
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Early in the morning it found that internal systems could not be accessed. An investigation showed data on multiple servers had been encrypted without authorization. It blocked access to all servers that might have been accessed. [1] [2]
It reported to the police. [1]
It reported to the Personal Information Protection Commission. [1]
It announced the possibility of a personal data leak, saying no misuse of personal data had been confirmed. [1] [2]
Timeline
- Detected 2024-08-27
- Disclosed 2024-09-06
- 10 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak][Service outage]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Major]Osaka, Osaka, Kita-kuWholesale and retail trade
Sanyo Bussan Co., Ltd.
Sources
- [1][News]複数サーバが暗号化、個人情報流出の可能性 - 三陽物産Security NEXT · 2024-09-24
- [2][News]三陽物産に不正アクセス、データが不正に暗号化ScanNetSecurity · 2024-09-24 08:05