Breaches and incidents
Scala Communications (i-ask FAQ / inquiry system): admin site login and planted program expose up to 713,126 inquiries at Daiwa Securities, Citizen, Sompo Japan and others
Per Impress, an intruder logged into the i-ask admin site without authorization between about 20:30 on 2 Oct and 08:00 on 3 Oct, installed a program and...
- Disclosed
- Verification
- Checked against a primary source
What happened
- Per Impress, an intruder logged into the i-ask admin site without authorization between about 20:30 on 2 Oct and 08:00 on 3 Oct, installed a program and took inquiry data from up to 5 client databases on the same server (up to 713,126 inquiries); Daiwa Securities said about 110,000 customers’ names, emails and account numbers may be affected (about 220,000 items in all), Citizen about 100,000 people (Citizen, Bulova, Frederique Constant), and Sompo Japan up to about 60,000 inquiries.
- Root cause: unauthorized login to the admin site; how the credentials were obtained was not disclosed.
- No attacker named.
- Scala blocked access after a monitoring alert; Citizen and Daiwa say their own systems were not accessed; Citizen and Scala reported to the PPC and Citizen is retiring the system; Tobu Railway, also a Scala client, said no access to its data was found.