SKY Perfect JSAT announced that up to 32 records of personal information may have been leaked following unauthorized access to an external service through the inquiry form on its website. The company is currently investigating whether any actual leakage occurred and says the vulnerability has been fixed.
SKY Perfect JSAT disclosed that information relating to the SATELLITE CRAYON PROJECT website it operates may have been leaked as a result of unauthorized access to an external service. The information concerned was entered in the inquiry form and may include a company name, name, address, telephone number, email address and inquiry details. Credit card information was not included.
The potentially leaked information resulted from unauthorized access to the cloud environment of the Studio responsible for developing the website between 30 September and 1 October. The company explained that a vulnerability in part of the site's functionality was exploited, leaving the data accessible for retrieval from outside until the 14th.
There is currently no confirmed evidence that a third party actually obtained the information, and the vulnerability has been fixed. SKY Perfect JSAT suspended operation of the inquiry form on the affected site. On the same day, the company had also announced that members' email addresses may have been leaked following unauthorized access to the cloud service of SoftBank subsidiary IDC Frontier, but on the 16th it corrected this, stating that there had been no viewing or leakage.
The report also refers to other information leaks disclosed by the company as related past incidents, and further disclosures on the status of the investigation are expected.