[ITmedia News] Coconara, 2,294 members' resumes etc. leaked Unauthorized access to skill market

On October 9, Coconara announced that its ``Coconara Skill Market,'' a service that allows users to buy and sell skills, had been accessed illegally by a third party, and 449 members' resumes and 1,845 resume-related documents had been leaked.

Coconara Skill Market claims to be ``Japan's largest skills market'' with a service that allows you to buy and sell skills such as design, website production, and business agency. Requests from companies are also possible.

Unauthorized access from the outside was detected and blocked at 2:05 a.m. on October 8, but unauthorized access was detected again at around 1 p.m. on the same day. Evidence of personal information being taken outside was confirmed around 3 p.m. The attack vector was shut down at 3:44 p.m., and the vulnerability was fixed by 9:27 p.m.

Only documents related to resumes and job history were leaked. Credit card information and various passwords are not subject to unauthorized access. We have not confirmed that the information was disclosed to an unspecified number of people or used fraudulently.

Additionally, other services operated by the company, such as the agent business, will not be affected.

The service continues to be provided after taking measures to prevent unauthorized access from outside. Target participants will be contacted individually.