Hankyu Hanshin, Nifty, Furusato Choice [Unauthorized access discovered on the 19th]

The unauthorized access discovered on the 19th is as follows.

H2O Retailing, which operates Hankyu Hanshin Department Stores, etc.

It was announced on the 19th that a website operated by Hankyu Hanshin Department Store, a subsidiary of the company, had been accessed illegally and customers' personal information had been leaked. Approximately 1.26 million members, or almost all H2O IDs, are targeted.

Information that may have been leaked includes names, email addresses, addresses, phone numbers, dates of birth, and the last four digits of credit card numbers. From the 16th to the 17th, the company's customer management system was illegally accessed through three websites, including the Hankyu Department Store/Hanshin Department Store reservation site.

No unauthorized use has been confirmed at this time. Inquiries can be made at the dedicated counter (0120-110-256 or 0120-369-089) between 10 a.m. and 8 p.m.

Internet connection company Nifty

It was announced on the 19th that up to 540,000 customer information may have been leaked due to unauthorized access from an external party. It is said to include the names, addresses, phone numbers, email addresses, etc. of members of the provided services.

According to Nifty, unauthorized access to the line application and reception management system was confirmed on the 19th. There is a possibility that the information of customers who applied for optical line services such as @nifty Hikari may have been leaked. It does not include member account or credit card information.

Trust Bank operates the hometown tax donation intermediary site “Furusato Choice”

It was announced on the 19th that the service had been temporarily suspended after detecting an incident that suggested unauthorized access to the site. I am unable to complete the tax payment procedures. A specialized team is said to be working to confirm the facts and scope of the impact.

Furusato Choice is a major brokerage site. As of October 2024, it is possible to apply for donations to 1,700 local governments, and the number of return gifts has exceeded 760,000 items.

``We deeply apologize for the great inconvenience and concern we have caused our users,'' the company said in a statement.

Major consumer electronics retailer Joshin

Some services are said to be "unable to provide" due to unauthorized access to the network.

We recognized the unauthorized access on the 16th and implemented measures such as restricting external access. It was announced on the 17th. There is a possibility that personal information may have been leaked, and an investigation is underway.

The store is said to be operating as usual. The company said, ``We apologize for the concern and inconvenience caused.''

Ashikaga City, Tochigi Prefecture

Ashikaga City, Tochigi Prefecture, announced on the 18th that there was unauthorized access to the city's funeral hall reservation system, and the personal information of approximately 8,800 funeral hall users and the business information of 56 registered funeral service providers may have been leaked. No secondary damage has been confirmed.

A server used by a company in Ibaraki Prefecture, to which the city outsources its system, was attacked by a cyberattack. According to the company, in addition to six cities in Tochigi Prefecture, including Ashikaga City, a total of 20 local governments and some administrative associations in Ibaraki, Saitama, Gunma, and Niigata prefectures are using the company's funeral hall reservation system, but each server stores information separately, and no damage has been confirmed outside of Ashikaga City. However, the company temporarily suspended all systems to prevent further damage. It is expected that it will take several days to reopen.

According to Ashikaga City, the funeral service provider contacted them on the 15th to say that reservations were not possible, and when the contractor checked, it was discovered that there had been unauthorized access. I shut down the system and switched to telephone reservations on the 16th. The user information that may have been leaked is the name, date of birth, address, and gender of the deceased person registered between December 1, 2022 and October 15, 2016, and the name, address, and phone number of the applicant. For funeral service providers, company name, address, phone number, and email address.

Email distribution service company “Yumiru Link”

On the 19th, Ymir Link, which handles e-mail distribution services, announced that some of its systems had been accessed illegally by an external party, resulting in a leak of personal information. The company estimates that a total of about 9 million pieces of information, including email addresses, may have been leaked.

Unauthorized access was confirmed early on the 16th. Five systems were compromised. The details are currently under investigation.

According to the company's website, the company operates a large-scale email distribution system with tens of millions of members and a short message distribution service using mobile phone networks.

Japan External Trade Organization (JETRO)

The Japan External Trade Organization (JETRO) announced on the 19th that some of its websites had been accessed illegally, resulting in the leak of 743 pieces of personal information, including the email addresses of company representatives. The company has been notified of the outline of the incident and the details that were leaked. The website has been temporarily suspended from the 17th.