A database of Entatch, a subsidiary of Toho Holdings, was subject to unauthorized access, and some customer information from its MR support service was reportedly leaked. The scope of the leak remains under investigation, and the potentially leaked information includes names, affiliations and locations.
Toho Holdings announced on the 19th that a database of its subsidiary Entatch, which provides MR support using a web conferencing system, had been subject to unauthorized access, resulting in the leakage of some customer information. The scope and number of affected records are currently under investigation.
Information that may have been leaked includes the names of MR representatives, their affiliated medical institutions and the prefectures where those institutions are located, as well as representatives' names and email addresses. However, the company explained that files used by MRs to provide information and recorded video and audio data were not present in the affected database and were not included in the leak.
The leak was attributed to a ransomware attack by a third party. The company has taken measures including applying security patches to the database and preserving access logs. No data tampering or deletion has been confirmed at this point.
Toho Holdings explained that the incident occurred within Entatch's systems, did not affect other group systems, and has not disrupted the operations of the group as a whole.