The Japan Network Security Association (JNSA) is investigating after a service it operates was subject to unauthorized access, with up to 15,128 records, including administrator names and email addresses, potentially leaked.
The Japan Network Security Association (JNSA) announced that its Information Security Literacy Check Service was subject to unauthorized access by a third party, and that the number of personal-information records potentially at risk of leakage may be as high as 15,128. The service has been suspended, and an investigation into the cause and scope of the impact is underway.
The information potentially at risk of leakage includes administrators’ names, company names, email addresses, organisation locations, employee numbers, industries, numbers of users, and users’ IDs and passwords. JNSA said that the passwords are hashed.
JNSA confirmed the unauthorized access on 4 November and indicated that unauthorized access may have occurred from around the evening of 30 October. To prevent the damage from spreading, it suspended the affected service and is investigating together with an external specialist provider.
JNSA plans to report the matter to the Personal Information Protection Commission and will contact affected individuals individually once they have been identified. It is urging users to exercise caution regarding links and attachments in suspicious emails, and says that official communications will not ask users to enter their IDs or passwords.