Bushiroad announced that a third party had gained unauthorized access to the system of the service provider it engaged to develop the smartphone game “BanG Dream! Our Notes,” resulting in the leakage of information on closed beta test applicants and personal information from customer support inquiries. The affected scope reportedly includes beta applicants and related data, as well as information on customer support users. Bushiroad said it is proceeding with remediation and measures to prevent recurrence.
Bushiroad announced that a third party had gained unauthorized access to the system of the service provider it engaged to develop its smartphone game “BanG Dream! Our Notes,” resulting in the leakage of personal information belonging to beta test applicants and people who submitted customer support inquiries. The leakage reportedly occurred from 5:00 p.m. on 25 June to 2:59 p.m. on 29 June.
The leaked beta test information included the email addresses, IP addresses, application dates and device information of 10,194 applicants; information including the names and telephone numbers of 71 people involved in operating the beta test; and portions of beta survey responses, including 4 email addresses and 1 X account. Information related to customer support involved 3,034 people and included the contents of inquiries, device information, player IDs, email addresses, names, telephone numbers, addresses and postal codes.
The unauthorized external access reportedly resulted from inadequate management by the service provider. At present, no secondary damage related to this incident has been identified in environments outside those involved. Bushiroad said it had requested a full review of the service provider’s security management framework and thorough implementation of countermeasures, and outlined a policy of strengthening information security across the group.
The company said it had completed remediation by the development service provider and plans to contact affected customers individually. It also said it would continue to provide relevant disclosures concerning any additional information and the detailed causes of the incident.