[ITmedia News] Cyber security cloud leaks customer information from GitHub "We take this seriously as a security company"

Cyber ​​Security Cloud, which provides corporate security services such as WAF (Web Application Firewall), announced on November 12 that there was suspicious access to the company's management area on GitHub, which is used for software development, and that personal information stored there may have been leaked.

It was confirmed through information provided by an external organization that one GitHub authentication information used by an employee for work had been leaked. It is said that there was suspicious access that appears to have been made by a third party using this authentication information.

There is a risk of leaks of some customers' company names, names, email addresses, etc., as well as communication-related information associated with service use. The scope of the subject's personal information is currently under investigation.

After receiving information from an external organization, we investigated GitHub's access logs and confirmed on November 5 that there had been suspicious access in the past. However, there are restrictions on the period and recorded content that can be checked in the log, and it is not possible to check the access status for the entire period that the authentication information was valid.

As a countermeasure, we invalidated the leaked GitHub authentication information and checked and changed the authentication information for other services stored on GitHub. Various related authentication information and access privileges were reviewed, and related development devices were isolated and accounts were suspended. In-house security engineers and external specialized agencies are currently conducting a forensic investigation.

Customers who are found to be at risk of information leakage will be informed in due course. Regarding personal information that the company has been entrusted with handling by customers, the company will work with the outsourcer to notify the individual.

We have not confirmed any unauthorized access to the company's services, unauthorized operations, or secondary damage caused by this. There is no impact on service provision or security functions, and each service continues to be provided as usual.

The impact on business results is currently being examined. The company said, ``As a company that provides security services, we take this matter seriously and will make company-wide efforts to prevent recurrence and restore trust.''