Science & Tech · Cybersecurity · 3 hrs ago
JR Central says data from about 15,000 customers may have been exposed
JR Central said data linked to about 15,000 customers may have been exposed from its online stores JR Central MARKET and Iimono Tanken.
The possible exposure followed unauthorized access on October 7 to a cloud service run by IDC Frontier, which supported the stores’ email service.
The data may include email addresses, names, addresses, phone numbers, order details and survey responses.
JR Central said credit card details and account passwords were not at risk.
There is no evidence so far that the information was actually taken or leaked.
JR Central stopped using the affected cloud environment and moved email delivery to a different one, while posting warnings on both sites.
The incident matters because personal information could be misused if it was accessed.
IDC Frontier said the ransomware attack affected 495 companies and local governments, and JR East and JR Kyushu also warned that some customer email addresses may have been exposed.
JR Central said about 15,000 customer records may have been exposed after unauthorized access to an IDCF cloud environment.
The potentially affected information relates to customers of JR Central MARKET and Iimono Tambo.
The data may include email addresses, names, addresses, phone numbers, order details and survey responses.
JR Central said it had found no evidence that personal information had actually been leaked outside the system.
Credit card information and login passwords were not at risk of exposure, the company said.
- Who
- JR Central customers who used JR Central MARKET and Iimono Tambo.
- What
- About 15,000 records may have been exposed after unauthorized access to a cloud environment used for the sites’ email services.
- When
- JR Central announced the possible exposure on October 13. The unauthorized access was confirmed on October 7.
- Where
- The affected service was an IDCF cloud environment used by the email distribution provider.
- Why
- Unauthorized access to IDCF Frontier’s cloud environment meant customer information could not be ruled out as having been viewed or obtained by a third party.
This story does not have two clearly opposing sides.
IDCF Frontier confirmed unauthorized access by a third party, and the affected-record count was based on data from that date.
JR Central announced that about 15,000 customer records may have been exposed.
- Potentially affected records
- About 15,000
- Affected sites
- JR Central MARKET and Iimono Tambo
- Unauthorized access confirmed
- October 7
- JR Central announcement
- October 13
- Information not at risk
- Credit card information and login passwords
Related
OpenAI engineer charged after recording device found in executive conference room
42 mins ago · 36 sources
U.S. charges 14 over North Korean remote-work scheme
31 mins ago · 7 sources
Cyberattack disrupts refrigeration at hundreds of French supermarkets
2 hrs ago · 47 sources
Hack of emergency alert system may expose data from 3.13 million email addresses
1 hr ago · 3 sources
What people are saying
The possibility that customers’ personal information was viewed or obtained by a third party cannot be ruled out