On October 15, Kobo announced that an API server for integration with external business partners of “Hassha All Right Net,” the bus ticket reservation portal it operates, had been accessed without authorization by a third party, resulting in the leak of some reservation information.
On October 13, it detected suspicious access, occurring between September 16 and 19, to an integration API server used to provide reservation services to bus operators and others. Kobo immediately cut off communications with the server, but confirmed traces indicating that some reservation information had leaked externally before the measures were taken.
The information that may have been leaked includes certain reservation details for bus tickets with travel dates between July 16 and November 29: reservation names (names) in katakana, telephone numbers, and bus reservation information, such as travel dates, routes, and reservation numbers. Credit card information, bank account information, addresses, email addresses, passwords, and similar data were not stored on the affected server.
Up to 8,341 records involving 5,614 individuals may have been affected, with final confirmation ongoing for both figures. Of these, 548 records involving 448 individuals may have leaked through Hassha All Right Net, also pending final confirmation. Those affected will be notified by email in sequence.
Kobo has reported the incident to Japan’s Personal Information Protection Commission, filed a damage report with the relevant police station, and is cooperating with the criminal investigation. Security measures for the affected server have been completed, and the company has confirmed that the unauthorized access has not continued and that the damage has not expanded. Kobo has also reported the situation to its partner bus operators and travel website operators.
Notice
This article was generated using automatic translation by GPT-4 API. The translation may not be accurate.
