Skymark announced that personal information had been accessible because access restrictions were not properly configured on the management screen for recruitment inquiries.
The affected individuals are 488 people who submitted inquiries through the recruitment inquiry form between March 2016 and February 2020. The information had been accessible from March 2016 until October 16 of this year.
The information that could be viewed for new graduates included their names, names in kana, email addresses, school names, faculty and department names, and inquiry details. For graduates, it included their names, names in kana, email addresses, employer and department names, and inquiry details. It did not include addresses, telephone numbers, or credit card information.
On October 16, an employee discovered that the relevant screen could be accessed from outside the company, and measures were taken on the same day to prevent external access.
Skymark said the issue was caused by an incorrect system configuration and that no evidence of external attacks has been identified at this time. No unauthorized viewing by third parties, information leaks, or secondary damage has been confirmed. While access records since June 9, 2025, confirmed that there had been no access to the relevant screen, no access records remain for the period before that date, making it impossible to determine whether the information had been viewed. The screen could not be accessed unless its URL was known directly. It was not used in day-to-day operations, and only a limited number of people within the company knew the URL.
Skymark said it will inspect its other systems for similar issues and work to prevent a recurrence. The company is also urging people to be cautious of suspicious emails and phone calls impersonating Skymark, stating that it never requests personal information or passwords, or asks for money transfers, by email.
Notice
This article was generated using automatic translation by GPT-4 API. The translation may not be accurate.
