JNSA: unauthorized access to its security comprehension check service puts up to 15,128 user records at risk

On 4 November Japan Network Security Association confirmed unauthorized third-party access to its Information Security Comprehension Check service. The investigation so far indicates the access may have begun around the night of 30 October. It stopped the service to limit the damage and is investigating cause and scope with an outside specialist. [1]

Up to 15,128 records may have leaked: registered administrators’ names, company names and email addresses, organization location, staff size and industry, user counts, and users’ IDs and passwords (hashed). The count and scope may change, and those affected will be contacted individually. JNSA warns of emails impersonating it. [1]