Unauthorized access to "Unko Museum" official website, risk of personal information leakage

On August 14th, the official website of the Unko Museum, an entertainment facility themed around poop, announced that the site had been accessed illegally and a portion of it had been altered, leading to the possibility that the personal information of four people had been leaked. The cause is said to be an attack that exploited a vulnerability in third-party software.

The information that may have been leaked included the names, email addresses, phone numbers, and text of inquiries submitted by the four people through the inquiry form between 5:04 p.m. on August 10th and 11:24 a.m. on August 11th.

Although the site does not store transmitted data in its database, it cannot completely rule out the possibility that a third party intercepted and obtained the data transmitted during the falsification period.

By August 11th, we had completed deleting illegally installed files, restoring tampered areas, and fixing vulnerabilities. Those affected are being contacted individually and asked to be careful of suspicious emails, SMS, and phone calls.

As measures to prevent a recurrence, the company plans to manage vulnerabilities in third-party software and related plug-ins, strengthen authentication of administrator accounts, and strengthen monitoring and log analysis systems.

The site is jointly operated by Fun Museum, which operates the Unko Museum, and Kayak.