> JapanHacked_Cybersecurity incidents in Japan

Banking and investing

Lake ALSA

Lake ALSA (run by Shinsei Financial Co., Ltd.) was hit in 1 recorded cybersecurity incident. The latest was disclosed on 2021-03-05.

About the service

Website: https://lakealsa.com/
Run by: Shinsei Financial Co., Ltd.
Category: Banking and investing
For: People

Incident history

Disclosed 2021-03-05Updated 2021-03-18 08:00Tokyo[Resolved][Severity: Major][Breached][Major]
Shinsei Financial: 36 members of its Lake ALSA card loan service were logged into without authorization, and 23 suffered fraud such as illegal ATM withdrawals
[Phishing][Credential abuse][Data leak][Fraud]Leaked 36Organizations 1

		Incident	Role	Impact level				Methods	Impacts		Status
2021-03-05	2021-03-18 08:00	Shinsei Financial: 36 members of its Lake ALSA card loan service were logged into without authorization, and 23 suffered fraud such as illegal ATM withdrawals	[Breached]	[Major]	[Major]	1 Shinsei Financial Co., Ltd.	Tokyo	[Phishing][Credential abuse]	[Data leak][Fraud]	36	[Resolved]

Other incidents of the operator (1)

Disclosed 2021-09-16Updated 2021-09-27 10:22Tokyo[Investigating][Severity: Critical]
Aplus, Shinsei Bank and Shinsei Financial: customer login details and email addresses were mistakenly given to web analytics contractors, 475,813 customers at Aplus
[Misconfiguration][Data leak]Organizations 3

		Incident				Methods	Impacts		Status
2021-09-16	2021-09-27 10:22	Aplus, Shinsei Bank and Shinsei Financial: customer login details and email addresses were mistakenly given to web analytics contractors, 475,813 customers at Aplus	[Critical]	3 Aplus Co., Ltd., SBI Shinsei Bank, Limited, Shinsei Financial Co., Ltd.	Tokyo	[Misconfiguration]	[Data leak]	Unknown	[Investigating]