> JapanHacked_
[Contained][Severity: Major][Unknown]

CIC: impersonators applied for its internet disclosure service, and credit information of 22 people may have been disclosed to third parties

Impersonated applications may have led to disclosure of credit information to third parties. 22 people were confirmed, and the internet disclosure service was suspended.

Disclosed

2025-04-28

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It announced that it had detected applications to its internet credit information disclosure service from third parties impersonating customers, and that credit information may have been disclosed to them. It confirmed possible improper applications and disclosure for 22 people, suspended internet disclosure including Credit Guidance for the time being, and limited disclosure to postal mail. It reported to the Ministry of Economy, Trade and Industry, the Financial Services Agency and the Personal Information Protection Commission. [1] [2] [3]

Timeline

  1. Detected, Disclosed 2025-04-28
  2. 1 days

Attack or cause

Method
[Unknown]
Impact
[Data leak][Service outage]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]第三者への信用情報の開示についてのお詫びとお知らせCIC Corp. · 2025-04-28
  2. [2][News]CIC、「なりすまし」で信用情報を第三者へ開示の可能性 ネット開示停止Impress Watch · 2025-04-30
  3. [3][News]当面 郵送で対応 ~ クレジット、ローンの信用情報開示サービスになりすまし 第三者に開示した可能性ScanNetSecurity · 2025-05-15 08:05