Unauthorized access incidents have occurred one after another at multiple companies and local governments, raising concerns about the possible leakage of personal information. Information leaks have been reported at major services including Skyticket, prompting the government and companies to strengthen their countermeasures.
The unauthorized access incident involving Adventure, which operates Skyticket, has reportedly resulted in the leakage of approximately 14.64 million records of personal information, some of which may include password data. In response, affected individuals are being notified sequentially and urged to change their passwords.
Park24, which operates Times Car, has confirmed the leakage of information including images of driver's licenses, and Yamagata Prefecture has begun accepting applications for reissuance of the licenses. Relatedly, disaster information distribution systems for local governments have also been affected, with multiple local governments confirming disruptions including the suspension of disaster-prevention emails.
The possible leakage of personal information has been identified at multiple companies, including approximately 11.18 million Burger King member records, up to 6.43 million Bookoff records and approximately 5.31 million Yamato Transport records. These companies are warning people to beware of suspicious emails and phone calls and are working with relevant organizations to prevent a recurrence.
In response to the severity of the cyberattacks, the government has issued notices calling for the NCO to consolidate information and for stricter information management by contractors, while advancing stronger public-private countermeasures. It is also urging officials at local governments and financial institutions to introduce multifactor authentication and review their handling of information.