[ITmedia News] Unauthorized access to Commune could lead to member information leak at LINE Yahoo, Sansan, and Panasonic

On October 9th, companies such as LINE Yahoo, Sansan, and Panasonic, which use the service, each announced the impact of an issue in which ``Commune'', a community platform for businesses operated by Commune (Shinagawa Ward), was accessed illegally, resulting in the leakage of member information for approximately 307,000 members.

On the same day, Yamaha and Suzuki, which operated communication sites based on ``Commune'', also announced the impact (Related article: Was Yamaha and Suzuki also leaked? Unauthorized access to the communication site platform ``Commune'' may affect a total of 300,000 members).

As information leaks are being announced one after another, cases in which external services used in business are attacked and lead to leaks are becoming more prominent. Recently, companies using the service, including Daiwa Securities, Citizen Watch, and Sompo Japan, have announced the possibility of customer information being leaked due to unauthorized access to Scala Communications' FAQ system "i-ask." (Related article: Approximately 60,000 cases were leaked to Sompo Japan due to unauthorized access to the same outsourcing company as Daiwa Securities and Citizen)

LINE Yahoo's email address leaked on ``DS.LAB'' for business operators

LINE Yahoo was influenced by the community function ``DS.LAB'' within the desk research tool ``DS.INSIGHT'' for business operators.

A third party may have viewed and obtained the user's nickname, account name, name, self-introduction, icon, group affiliation, email address, custom profile items, points, and last active date and time.

Email address leaked on Sansan user forum, "Eight" etc. are not affected

Sansan confirmed that information for 1,325 people had been leaked on the user community "Sansan User Forum." The email address, account name (display name), contents written in the self-introduction section, profile image, and group affiliation information within this community are said to have been included.

Additionally, the account names (display names) of 8,687 people, contents written in the self-introduction section, profile images, and group affiliation information within the community may have been leaked.

The community runs on an external cloud service that is independent of Sansan's services, and there is no impact on its own services such as "Sansan," "Bill One," "Contract One," and "Eight."

Pana is "LUMIX community" etc.

Panasonic said it received a report from the community that member information, including email addresses, had been leaked for approximately 2,000 members of the "LUMIX Community" and approximately 3,000 members of "Hair Supplement by Panasonic Beauty."

The company is warning people to be wary of email scams that appear to be from the company or related parties.

Author of this article

Related articles