Kimura Information Technology: Biznar pre-launch environment breach puts 7 people’s names and email at risk

On 3–4 November, an attacker abused management functions in one customer-specific Biznar environment through authentication/permission defects. The environment was not yet in full operation and held names/email for 7 people, which may have been viewed or acquired. External access was blocked on 4 November after discovery that morning; no subsequent intrusion is confirmed. [1]

Similar intrusions in other customer environments and misuse of the at-risk data are not confirmed. The customer, affected people and PPC were notified. Authentication/permission changes and stronger logging, detection and notification are being implemented. [1]