Security News
Line, the Japan-based messaging and payments app with millions of users around Southeast Asia, has conceded that its data protection regimes had multiple shortcomings, and therefore put users' personal information at risk. Parent company Z-Holdings yesterday released a report compiled by a Special Advisory Committee on Global Data Governance that it convened in the wake of revelations that some user data had been processed in China and/or stored in South Korea.
Japanese technology giant Olympus is currently investigating a cyber incident on its EMEA IT systems that happened earlier this month that sources said is the result of a BlackMatter ransomware attack. It appears Olympus was the victim of the BlackMatter ransomware group, one of the cybercriminal organizations that's risen to prominence after other purveyors of ransomware like DarkSide, REvil and Ragnarok shut down operations, according to a report in TechCrunch.
Important Notice: We are sorry to announce that #LiquidGlobal warm wallets were compromised, we are moving assets into the cold wallet. In a cold wallet setup, the files that constitute your cryptocoin stash are inaccessible to malware or hackers who manage to wriggle into your computer, thanks to being kept offline, and unusable in the event of an intruder in your house finding the storage device on which you stashed them, thanks to being encrypted.
Tokio Marine Holdings, a multinational insurance holding company in Japan, announced this week that its Singapore branch, Tokio Marine Insurance Singapore, suffered a ransomware attack. As the largest property and casualty insurance group in Japan, Tokio Marine Holdings is an attractive target for cybercriminals, who can use the breach to find and compromise customers of the organization.
Japan's Ministry of Foreign Affairs and Ministry of Land, Infrastructure, Transport and Tourism this week confirmed impact from a data breach at service provider Fujitsu Limited. Earlier this week, the Japanese multinational provider of IT services and products confirmed it suffered a cyberattack resulting in unauthorized access to ProjectWEB, a tool that allows organizations to share data within and outside their environments.
A Fujitsu project management suite is causing red faces at the Japanese company's HQ after "Unauthorised access" resulted in data being stolen from government agencies, local reports say. The firm's ProjectWEB tool was reportedly accessed by an unidentified "Third party" who helped themself to data from, among others, Japan's Ministry of Foreign Affairs, its Cabinet Office Cyber Security Centre and the Ministry of Land.
Offices of multiple Japanese agencies were breached via Fujitsu's "ProjectWEB" information sharing tool. Fujitsu also said that attackers had gained unauthorized access to projects that used ProjectWEB, and stolen proprietary data.
Messaging app LINE has removed Chinese affiliate's access to personal data, after infosec concerns led Japanese government officials to stop using the app. Government officials began to rethink using the app following reports of foreign access to in-country equipment.
Japanese aerospace company Kawasaki Heavy Industries on Monday warned of a security incident that may have led to unauthorized access of customer data. According to the company's data breach notification, it first discovered unauthorized parties accessing a server in Japan, from an overseas office in Thailand, on June 11, 2020.
China-linked threat actor APT10 was observed launching a large-scale campaign against Japanese organizations and their subsidiaries. The attacks mainly focused on South and East Asia, with one victim being a Chinese subsidiary of a Japanese organization, an atypical target for a state-sponsored Chinese group.