Bank of The Ryukyus announced that a total of 96,477 customer email addresses had been leaked following unauthorized access to an external service entrusted with email distribution. The leak was limited to emails distributed between 8 and 29 October, and information capable of identifying individuals, such as names, addresses and account details, had not leaked at this time, the bank said.
Bank of The Ryukyus announced on the 4th that 96,477 customer email addresses had been leaked. It explained that the source of the leak was part of a subsidiary called アララ that had been subject to unauthorized access while providing an external email distribution service.
The leaked addresses were those included in emails distributed between 8 and 29 October after the service provider, アララ, a subsidiary of ペイクラウドホールディングス, was subject to unauthorized access by a third party. No leakage of personally identifiable information, such as names, addresses or account information, has been confirmed at this time, the bank said.
The bank said it would request that the service provider determine the cause and implement measures to prevent recurrence, and would work to strengthen its information management framework, including at outsourced providers. As suspicious emails may be sent to the leaked addresses, affected individuals have been urged to refrain from accessing URLs or entering personal information.
Details of future measures to prevent recurrence and the status of the investigation are expected to continue to be disclosed, and other related reports are also being referenced.