Sonicmoov: unauthorized access to the COMSBI Enterprise platform

On 26 October, Sonicmoov said its COMSBI Enterprise platform, a LINE integration service it provides separately to corporate clients, had been accessed without authorization. On the morning of 23 October someone logged into the admin console with improperly obtained credentials and, through a flaw in a console function, also took server credentials. It blocked outside access and stopped the service at 13:20 that day. For some clients, the names, email addresses and encrypted passwords of console users, LINE official account settings, and names, email addresses and other data of the clients' own customers have leaked or may have leaked. The SaaS version of COMSBI is not affected.