> JapanHacked_
[Resolved][Severity: Major][Insider]

Axis Consulting: a former employee took data of 1,306 registrants and clients to a new employer, leaking names and addresses

A former employee took personal data of registrants and clients to a new employer, leaking names, birth dates and addresses of 1,306 people.

Disclosed

2024-11-13

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. A registrant reported being contacted by the former employee, and it started an investigation. [1]

  2. Log analysis confirmed that the former employee had taken personal data of registrants and clients. [1]

  3. It demanded that the former employee and the new employer delete the data taken. [1]

  4. The former employee and the new employer told it that the data had been deleted and would not be used. [1]

  5. It announced the case, saying it was not an external intrusion but data taken by a former employee while employed. [1] [2]

  6. It added an update saying the count stayed at 1,306 people and that all the leaked data had been deleted. [1]

Impact

The data that leaked is all or part of the names, birth dates, addresses, phone numbers, email addresses, employer names and department names or titles of registrants and clients. It does not collect credit card data. [1]

Timeline

  1. Detected 2024-10-09
  2. Disclosed 2024-11-13
  3. 35 days

Attack or cause

Method
[Insider]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Date of birth][Postal address][Phone number][E-mail address][Employment]

Organizations involved

Open in organization search

Sources

  1. [1][Official]ご登録者様情報およびお取引先様情報の流出に関するお詫びとご報告Axis Consulting Co., Ltd. · 2025-02-19
  2. [2][News]転職先に 1,306 名の個人情報持ち出し ~ アクシスコンサルティング元従業員ScanNetSecurity · 2024-11-22 08:05