Unauthorized access occurred to Blastmail, an email distribution service provided by a RAKUS subsidiary, resulting in the external leakage of registered information for all subscribers and some distribution lists. Companies and local governments using the service, including Yokohama City and JR Shikoku, may also have been affected.
Unauthorized access was confirmed at Blastmail, an email distribution service provided by RAKUS LIGHT CLOUD, resulting in the leakage of registered information for all subscribers as well as information including subscribers' email distribution lists. The company says that credit card numbers were not leaked.
The company explained that the attackers infiltrated 2 API servers and executed commands, connected to the sales management system and database, and removed information. The detailed method of entry is still under investigation. The service has been suspended, and no resumption date has been set.
The impact is wide-ranging, with companies and local governments including Yokohama City and JR Shikoku announcing that they were affected. Niigata Nippo, H.I.S. Hotel Holdings and Tohoku Electric Power Frontier have also disclosed related information leaks. The specific scope of the impact is expected to become clear through further investigation.
RAKUS LIGHT CLOUD will continue investigating the details of the leaked information and the impact on each subscriber, and plans to contact affected subscribers individually. Warnings also continue regarding secondary damage, including suspicious emails impersonating people connected with the incident.