At Home: unauthorized login to the rental management system admin site puts 6,901 records of tenants and owners at risk

At Home Co., Ltd. said on 13 November that a third party had accessed and logged in to the admin site of its rental management system, a business management service for property agencies, on 9 November. Personal data of tenants, owners, business partners and others, registered by some of the member agencies that use the system, may have leaked. [1]

The count is 6,901 records, still under investigation. The data includes names, birth dates, landline and mobile numbers, addresses and contract details such as building name, room number and contract status. No leak of bank account details has been found, and the system holds no card data. No publication or misuse of the data and no effect on other At Home services has been found. [1]

At Home blocked the source of the access and set up an investigation team that is checking the access logs and the cause. It is identifying the member agencies and others who may be affected and contacting them individually. It reported the incident to the Personal Information Protection Commission, JIPDEC and JUAS on 12 November. [1]