Outsourced SaaS breach sparks concern over NTT DATA bond buyer information
Unauthorised access occurred in a supplier's SaaS used by STdirectServices, NTT DATA's service supporting benefits for corporate bond buyers. Personal information, including investor names and purchase amounts, may have been leaked, with Kintetsu disclosing potential impacts involving 2,678 records and SBI Securities reporting 1,169 potentially affected customers. NTT DATA disclosed the incident on 31 October, suspended the service and began an investigation.
Key facts
- Affected organisation
- NTT DATA
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Possible leak of personal information involving 2,678 Kintetsu-related records and 1,169 SBI Securities customers, among others; total scale undisclosed
- Cause / method
- Unauthorised access to a supplier's SaaS used by STdirectServices
- Location
- Japan
If your data was exposed
Exposed dataNameUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- NTT DATA disclosed unauthorised access to an outsourced service and a possible personal information leak, and suspended STdirectServices.
- Potential impacts involving 2,678 Kintetsu-related records and 1,169 SBI Securities customers became known.
Also affected by this incident
Contractor breach may have leaked 362 Rakuten Securities customer records
↳ Knock-on damage from the NTT DATA incident · View original incident362Impact: Possible leak of 362 customer records
A breach of the system of an NTT Data contractor raised the possibility that 362 customer records from Rakuten Securities relating to purchases of corporate bonds with digital perks leaked. NTT Data suspended STdirectServices, the perk-delivery service. Securities account passwords and trading information were not among the data affected.
Read on ITmedia NEWS ↗
7 related reports
- NTT Data Subcontractor Breach Exposes Japanese Bond Buyers’ Details
- STdirectServicesのサービス停止についてのお知らせ
- STdirectServices: Service Suspended Over Contractor SaaS Unauthorized Access and Potential Personal Data Leak - What Is and Isn't Confirmed
- NTTデータ、委託先への不正アクセスで社債特典サービスを停止、デジタル証券めぐり漏えいの公表相次ぐ
- 일본 디지털증권 플랫폼 해킹, 채권 투자자 수천 명 개인정보 유출 우려
- 住友生命保険の委託先NTTデータへの不正アクセス(Vitality利用者約8万人の個人情報漏えい)
- NTTデータ委託先に不正アクセス、社債購入者に対する特典付与を支援する「STdirectServices」のサービス停止
Other incidents at NTT DATA
NTT DATA denies data leak amid ransomware claims
Claims emerged that NTT DATA had been hit by ransomware. NTT DATA denied any data leak, and whether an infection actually took place and the scale of the damage have not been confirmed.
Read on Cyber Daily ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.