CIC: impersonators applied for its internet disclosure service, and credit information of 22 people may have been disclosed to third parties
Impersonated applications may have led to disclosure of credit information to third parties. 22 people were confirmed, and the internet disclosure service was suspended.
Disclosed
2025-04-28
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It announced that it had detected applications to its internet credit information disclosure service from third parties impersonating customers, and that credit information may have been disclosed to them. It confirmed possible improper applications and disclosure for 22 people, suspended internet disclosure including Credit Guidance for the time being, and limited disclosure to postal mail. It reported to the Ministry of Economy, Trade and Industry, the Financial Services Agency and the Personal Information Protection Commission. [1] [2] [3]
Timeline
- Detected, Disclosed 2025-04-28
- 1 days
Attack or cause
- Method
- [Unknown]
- Impact
- [Data leak][Service outage]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Major]Tokyo, ShinjukuFinance and insurance22 leaked
CIC Corp.
Sources
- [1][Official]第三者への信用情報の開示についてのお詫びとお知らせCIC Corp. · 2025-04-28
- [2][News]CIC、「なりすまし」で信用情報を第三者へ開示の可能性 ネット開示停止Impress Watch · 2025-04-30
- [3][News]当面 郵送で対応 ~ クレジット、ローンの信用情報開示サービスになりすまし 第三者に開示した可能性ScanNetSecurity · 2025-05-15 08:05