Access Co., Ltd.
Notice of Unauthorized Access and Personal Data Leakage at a Consolidated Subsidiary
Unauthorized access occurred to the CROS e-commerce support service of consolidated subsidiary AP Taiwan, resulting in leakage of customer information for Taiwan, Hong Kong, Macao, and Singapore. Some data including credit card-related information were leaked, with the intrusion originating via a specific BI tool. No impact on other business partners has been confirmed to date. Remediation and recurrence-prevention measures have been implemented, and the impact on business performance is expected to be minor.
Key Figures
- Leaked targets: ID-related 155,280 shares, Order ID 231,998 shares
- Credit card-related 1,671 cases (Accounts 1,305 people)
- Fraudulent emails sent 11,441 cases
AI要約
Overview and Cause
Unauthorized access to AP Taiwan's CROS service was confirmed. It was determined that intruders accessed data starting from a specific BI tool, resulting in acquisition and external leakage of personal information. The leaked data concerns customers in Taiwan, Hong Kong, Macao, and Singapore and includes some credit card information. No impacts on other business partners have been confirmed to date. Measures implemented include strengthening the BI tool's security and updating key payment information.
Response and Future Measures
The compromised server was isolated and emergency-shutdown procedures were performed; email-sending authentication credentials were invalidated and updated; CROS service was temporarily suspended and database passwords were changed; credit card information was masked; and payment service private keys were updated. To prevent recurrence, security enhancements for the BI tool, code changes to avoid retaining incomplete payment credit card information, and verification by security specialists from headquarters are planned.
Access Co., Ltd.
Company overview · Stock price · Financial data · All IR
