Dentsu Digital TONARIWA breach leaks personal data from two client companies
Unauthorised access and privilege escalation using leaked administrator account credentials were confirmed on Dentsu Digital's marketing platform TONARIWA. A follow-up announcement on 12 November confirmed logs showing that personal data from two client companies had been exfiltrated, with names, dates of birth, contact details and LINE integration access tokens among the information identified as leaked. All servers were shut down and isolated, and the number of affected records is under investigation.
Key facts
- Affected organisation
- Dentsu Digital
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal data from two client companies leaked; number of affected records under investigation
- Cause / method
- Unauthorised access and privilege escalation using leaked administrator account credentials
- Location
- Japan
If your data was exposed
Exposed dataNameDate of birth
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Leaked TONARIWA administrator account credentials, privilege escalation, and a possible leak of personal data and LINE integration tokens were disclosed.
- Dentsu Digital confirmed logs showing the exfiltration of personal data from two client companies and announced that all servers had been shut down and isolated.
Also affected by this incident
Dentsu Digital breach shuts down Japan Post’s LINE service
↳ Knock-on damage from the Dentsu Digital incident · View original incidentImpact: Suspension of the official LINE service and possible leak of user information
Japan Post’s official LINE service was suspended after TONARIWA, Dentsu Digital’s LINE account management platform, was compromised. The attacker used leaked administrator account credentials to gain unauthorised access and then escalated privileges. An investigation is examining whether Japan Post users’ personal information and LINE account-linking authentication information may have been leaked.
Related reports: 5 →
10 related reports
- 電通デジタル マーケティングプラットフォーム「TONARIWA」への不正アクセス
- 電通デジタル（TONARIWA）情報漏洩・不正アクセス事案
- 電通デジタル「TONARIWA」に不正アクセス、管理アカウントの認証情報漏えいと権限昇格を確認 LINE連携トークンも流出の恐れ|セキュリティニュースのセキュリティ対策Lab
- 電通デジタル、マーケティング支援事業で情報漏洩か 不正アクセスで
- 【第二報】当社が提供する「TONARIWA」における不正アクセスに伴う個人情報漏えいに関するお詫びとご報告
- 電通デジタルのTONARIWAが不正アクセスを受け顧客企業ユーザーの個人情報が漏えいの恐れ
- TONARIWAが不正アクセスで一時停止｜個人情報とLINE連携トークン漏えいの可能性
- 電通デジタル「TONARIWA」に不正アクセス、LINE連携トークン流出の恐れ 企業は確認を（ビジネス＋IT）
- セキュリティ企業が不正アクセス受ける サイバーセキュリティクラウド
- TONARIWA第2報 導入2社で漏えい確認、件数調査中の範囲
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.