[ITmedia News] Approximately 1.5 pieces of customer information from JR Tokai's e-commerce site were leaked. ``We cannot deny the possibility that it was viewed'' due to unauthorized access to IDCF.

On October 13, JR Tokai announced that approximately 15,000 pieces of personal information, including email addresses, names, and addresses, may have been leaked from some of its customers on its e-commerce sites ``JR Tokai MARKET'' and ``Iimono Tanzan.'' This is related to the unauthorized access that occurred at IDC Frontier on October 7th.

The companies responsible for the email distribution services for both sites are using IDC Frontier's cloud, which was accessed illegally, and the company made the announcement because ``we cannot deny the possibility that customers' personal information may have been viewed or obtained by a third party.''

What may have been leaked include the recipient's email address, the name, address, phone number written in the body of the email, order details, shipping information such as the recipient's name and address, and survey responses and comments entered at the time of ordering. There is no possibility of your credit card information or login password being leaked.

The number of cases was calculated using data as of October 7, when IDC Frontier confirmed unauthorized access by a third party. At this time, we have not confirmed any evidence that personal information has actually been leaked to an external party.

JR Tokai stopped using the cloud environment that had been accessed illegally and switched to using a different environment to send emails. A warning has also been posted on both sites.

IDC Frontier's cloud service "IDCF Cloud" was attacked by ransomware and some virtual servers were stopped. It was announced that 495 companies and local governments would be affected. As a result of this incident, JR East and JR Kyushu announced on October 9 that members' email addresses may have been leaked.