Shippio breach exposes shipping information and disrupts service
An attacker accessed the Japanese trade and international logistics platform Shippio using credentials stored in an internal work tool, viewed customer shipping information and downloaded around 1,300 documents. Unauthorised accounts and API credentials were created for around 1,100 customer teams, and malicious file uploads and damage to system data were also confirmed. The service has been suspended since 2 November.
Key facts
- Affected organisation
- Shippio
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Around 1,300 documents downloaded and unauthorised accounts and API credentials created for around 1,100 customer teams
- Cause / method
- Unauthorised platform access using credentials stored in an internal work tool
- Location
- Japan
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Shippio platform services were suspended.
- The disclosure of personal data, damage to system data and temporary service suspension resulting from unauthorised platform access were announced.
5 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.