Idealog: development/test environment breached; real Kaijo Best Search and other data may leak

Idealog detected unauthorized access to its development/test environment on 30 October. Some Kaijo Best Search and Supenavi test data contains actual personal information; exposure and scope are under investigation. Login emails and passwords had been replaced with dummy values; actual authentication or card data is absent. Production is separate and no intrusion into it has been confirmed. [1]

Idealog suspects deficiencies in external-connection/authentication settings. It blocked the route and is revising credentials and access restrictions. JR West Hotels received the report on 4 November and is checking venue inquiries for Hotel Granvia Kyoto, Osaka, Okayama and Hiroshima, Nara Hotel, Osaka Station Hotel and Hotel Vischio Amagasaki. Actual exposure and counts remain unconfirmed. [1] [2]