Personal data of up to about 135,000 MyBRANDS accounts possibly leaked
Signs were found that a contractor's cloud management access key was abused on iDA's Japanese recruitment service MyBRANDS, and a replica database was transferred externally. Names, contact details, career information and converted passwords of up to about 135,000 job seeker and corporate contact accounts may have been leaked. The decryption key for encrypted information may also have been stolen, and the service was suspended.
Key facts
- Affected organisation
- iDA
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Possible leak of personal information of up to about 135,000 accounts
- Cause / method
- Abuse of a contractor's cloud management access key, leading to external transfer of a replica database
- Location
- Japan
If your data was exposed
Exposed dataNamePassword
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- An official announcement was made about the possible leak of MyBRANDS personal information.
- It emerged that personal information of up to about 135,000 accounts may have been leaked and the service was suspended.
- It was raised that the decryption key for encrypted information may have been stolen along with the personal information.
3 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.