Media4u: unauthorized access to its SMS delivery system

On 24 June, Media4u, a Fabrica Holdings subsidiary, found that its business SMS delivery system had been accessed. A file listing the accounts of its management console leaked (95,412 records, 22,928 of which may contain personal data), with account IDs, company names, contact names, prefectures and postal codes, and notification emails. Passwords, API keys and recipients' phone numbers were not included. 280 rogue SMS messages were sent through one customer's account. It fixed the vulnerability and reset the credentials of every account.