Axis Consulting: a former employee took data of 1,306 registrants and clients to a new employer, leaking names and addresses
A former employee took personal data of registrants and clients to a new employer, leaking names, birth dates and addresses of 1,306 people.
Disclosed
2024-11-13
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
A registrant reported being contacted by the former employee, and it started an investigation. [1]
Log analysis confirmed that the former employee had taken personal data of registrants and clients. [1]
It demanded that the former employee and the new employer delete the data taken. [1]
The former employee and the new employer told it that the data had been deleted and would not be used. [1]
It announced the case, saying it was not an external intrusion but data taken by a former employee while employed. [1] [2]
It added an update saying the count stayed at 1,306 people and that all the leaked data had been deleted. [1]
Impact
The data that leaked is all or part of the names, birth dates, addresses, phone numbers, email addresses, employer names and department names or titles of registrants and clients. It does not collect credit card data. [1]
Timeline
- Detected 2024-10-09
- Disclosed 2024-11-13
- 35 days
Attack or cause
- Method
- [Insider]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, ChiyodaScientific research, professional and technical services1,306 leaked
Axis Consulting Co., Ltd.
Sources
- [1][Official]ご登録者様情報およびお取引先様情報の流出に関するお詫びとご報告Axis Consulting Co., Ltd. · 2025-02-19
- [2][News]転職先に 1,306 名の個人情報持ち出し ~ アクシスコンサルティング元従業員ScanNetSecurity · 2024-11-22 08:05