Chugoku Electric Power: unauthorized access to a remote connection device may have leaked data of 15,566 staff and contractors

1. 2025-04-21

   It detected unauthorized access to a device used for outside connections that was linked to the system storing staff personal data, and disconnected the device from the network the same day. [1]

2. 2025-04-23

   It notified those concerned except former employees and asked them to change their passwords. [1]

3. 2025-04-25

   It announced the incident and reported it to the Personal Information Protection Commission. It said no customer personal data was involved and the stable supply of power was not affected. [1] [2]

The data that may have leaked is names, work email addresses, user IDs and encrypted passwords. It covers 15,566 people: staff and former staff of Chugoku Electric and its grid unit, and contractor staff. It believes a configuration flaw in the device was the cause. [1]