ENKR

Tokyo Gas Engineering Solutions unauthorised access

Add to my breach check

Made public

What leaked7

Replaceable

  • Card number

Hard to replace

  • Bank account number
  • Mobile number
  • Home or delivery address
  • Email address

Permanent

  • National ID or tax number
  • Full name
  • Card number8 staff records
  • National ID or tax numberMy Number of 5 business contacts
  • Bank account number85 business contacts and about 1,000 staff
  • Mobile numbercontact details · 連絡先
  • Email addressbusiness contacts' work email

To-dos3 · about 30 min in all

  1. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: phishing messages, scam calls
  2. Turn on instant transaction alertsabout 5 minHelps you notice: scam calls
  3. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home

What happened next10 events

  1. UndetectedNone on record
  2. Response 10 eventsNo individual notice on record · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record
  1. Notified Nagaoka City water customers that their data may have been viewed
  2. Outside investigators found no trace of exfiltration and judged an actual leak unlikely; TGES had kept client data on servers that should not have been reachable
  3. Tokyo Gas: no unauthorised use of the information confirmed so far
  4. Opened an inquiry line
  5. Published an apology
5 more
  1. Announced that data of about 4.16 million consumers entrusted to TGES, about 3,000 TGES staff and business contacts might have leaked
  2. Determined that customer data on TGES servers and Tokyo Gas's business-customer servers might have leaked
  3. Reported the possible leak to the PPC; investigating with the Tokyo Metropolitan Police and IPA
  4. Cut off the external route into its network
  5. Found traces of unauthorised access to its servers
Company
Tokyo Gas
When it happened
Company detected it
Made public
Notice
Possible leak
Affected
4,160,000 people whose details client companies and utilities gave TGES · possible leak; plus about 3,000 TGES staff and an unstated number of business contacts

How the facts developed

  1. Outside investigators found no trace of exfiltration and judged an actual leak unlikely; affected customers were still notified because viewing could not be ruled out
  2. Possible leak of data of about 4.16 million consumers; no trace of exfiltration found yet

Sources