Breaches and incidents
Trust Bank (Furusato Choice): 4,454,097 donor records leaked including tax deduction estimates
Trust Bank said a third party accessed member data on 17 Oct and 4,454,097 records leaked (figure may change).
- Disclosed
- Verification
- Checked against a primary source
What happened
- Trust Bank said a third party accessed member data on 17 Oct and 4,454,097 records leaked (figure may change): name, email, postal address, phone, hashed password and estimated donation tax deduction amount.
- Root cause: not fully disclosed; per the company and Impress Watch, it “detected a vulnerability” and is investigating it with outside experts. Detection came on 19 Oct from unusual access patterns.
- No attacker named.
- Furusato Choice services were suspended from 15:50 on 19 Oct with no restart date; the PPC was notified on 20 Oct and a police report was planned for 21 Oct; users were told to change reused passwords.