Security News > 2021 > May > Fujitsu SaaS Hack Sends Govt. of Japan Scrambling

Threat actors have stolen files from several official government agencies of Japan by hacking into Fujitsu's software-as-a-service platform and gaining access to its systems.

ProjectWEB is a a cloud-based enterprise collaboration and file-sharing platform that Fujitsu has operated since the mid-2000s, and which a number of agencies within the Japan government currently use.

Though Fujitsu did not disclose details about nor the scope of what was stolen, a report in the Japanese press claimed that attackers pilfered documents that contained more than 76,000 email addresses for employees and contractors for the Ministry of Land, Infrastructure, Transport, and Tourism.

The attack is the second cyber incident the government of Japan has suffered in a month.

The ProjectWEB incident also is not the first time Fujitsu had to disrupt a product due to a security incident.

In 2019, the company halted sales of its popular Fujitsu Wireless Keyboard Set LX901 after a researcher discovered that it was vulnerable to keystroke injection attacks that could allow an adversary to take control of a victim's system.

News URL

https://threatpost.com/fujitsu-saas-hack-japan-scrambling/166517/