Science & Tech · Cybersecurity · 11 hrs ago
Attackers used Kings Printers credentials to make AI calls; no data leak found
Attackers used Kings Printers’ credentials to make large numbers of calls to a generative AI service, the Japanese online printing company said on November 9.
The activity began on September 10 and lasted about seven hours, stopping after the AI service provider applied usage limits.
The attackers also created new credentials, which Kings Printers said it deleted along with the credentials that had been misused.
The company found no evidence of customer data access or theft, and no signs that data was changed or sent to the attackers.
Kings Printers said the incident involved its system credentials, not evidence of a breach of customer information systems.
It will replace static credentials with temporary ones and remove unnecessary keys from its cloud systems.
The company also plans to limit access rights to what each role needs.
Kings Printers said attackers misused its system credentials to make large numbers of calls to generative AI services.
The activity began on September 10 and continued for about seven hours, ending after the AI service provider applied usage limits.
The company said it found no evidence that customer information or other data was accessed, altered or stolen.
It said it had deleted the misused credentials and credentials created by the attackers.
Kings Printers plans to replace static credentials with temporary ones and review access permissions.
- Who
- Attackers misused credentials held by Kings Printers.
- What
- They used them to make large numbers of calls to generative AI services. The company found no evidence of data leakage.
- When
- The activity began on September 10 and lasted about seven hours. Kings Printers announced its investigation findings on November 9.
- Where
- Kings Printers’ system infrastructure.
- Why
- The attackers’ purpose was believed to be the unauthorized use of generative AI services.
This story does not have two clearly opposing sides.
Attackers began attempting large numbers of calls to AI services from multiple IP addresses.
The AI service provider applied usage limits, stopping the unauthorized activity.
Kings Printers’ second report said unauthorized use of generative AI services with credentials held by the company was believed to be the purpose.
Kings Printers announced the investigation findings, including that no data leakage had been confirmed.
- Unauthorized activity
- About seven hours
- Start
- September 10, 6:51 a.m.
- Stopped
- September 10, 1:44 p.m.
- Announcement
- November 9
- Data leakage
- No evidence found
What people are saying
Attackers attempted to make large numbers of calls to the AI service from multiple IP addresses, but the unauthorized use stopped after the service provider applied usage limits at 13:44 that day.