Resumen
28,824 deduplicated records (including 35 sensitive items): customer contacts' names, emails and login IDs, part of customer employees' attendance records kept for maintenance, and staff data. No access to production attendance data was found. The cause was misconfiguration and poor information handling on the development server.
Cronología
- Ocurrencia
- Descubrimiento
- Divulgación
Respuesta de la organización
Stopped the server, cut access, invalidated credentials, reported to the PPC on October 30 and is contacting those affected.
Qué puedes hacer
Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.
Fuentes
- 不正アクセスによる情報漏えいに関するお詫びとお知らせ株式会社チームスピリット · 2026-11-09