WingArc1st announced that unauthorized access to an external cloud service had occurred at nest Portal, which it operates, and that some members’ personal information may have been leaked.
After receiving a report from the provider of the cloud service used by nest Portal regarding unauthorized access by a third party, WingArc1st is investigating the cause and scope of the impact, as some member information may have been obtained and viewed through the unauthorized use of an administrator account.
The information that may have been leaked consists of some member information from nest Portal. The number of affected people is approximately 1,200 (current estimate; investigation ongoing), and the affected information is said to include registration details such as company name, title, name, name in kana, email address and address.
As part of its response, the service was suspended on 6 October, a preliminary report was received on 7 October, and a report was submitted to the Personal Information Protection Commission on 8 October. All members were also notified of the unauthorized access by email.
Regarding plans for resuming the service, nest Portal will be relaunched once safety checks and preparations to the environment have been completed. If important facts emerge from the ongoing investigation, the affected individuals will be contacted and further information will be disclosed.