YMIRLINK,Inc. was subject to unauthorized external access, raising the possibility that personal information including email addresses was leaked. The leaked data may comprise approximately 9 million records in total.
YMIRLINK,Inc. announced that it confirmed unauthorized access to 5 of its systems in the early hours of the 16th. The suspected cause was exploitation of a program vulnerability, which may have resulted in the credentials of support and quality-control personnel being obtained.
The company said that an unauthorized program had been exporting personal information and other data from YMIRLINK,Inc.’s databases, and that it was investigating whether any data had been leaked and the scope of the impact with external experts.
The company immediately disconnected the affected servers from the network and implemented measures to prevent a recurrence, including applying vulnerability patches. It said that the results of its ongoing investigation would be disclosed in cooperation with external experts.
The personal information that may have been leaked is said to include approximately 9 million records in total, including email addresses. The company continues to verify the full extent of the damage and the actual circumstances of the leak.