Sonicmoov COMSBI breach exposes client organisations’ personal data
Credentials for an internal operations account were misused in the SaaS version of Japanese company Sonicmoov’s LINE-integrated service COMSBI, exposing personal data held by multiple client companies and organisations. The exposed information included names, telephone numbers, email addresses, postal addresses, LINE profiles and user IDs. The total scale of the breach was not disclosed.
Key facts
- Affected organisation
- Sonicmoov
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal data held by multiple client companies and organisations exposed; total scale undisclosed
- Cause / method
- Misuse of credentials for an internal operations account
- Location
- Japan
If your data was exposed
Exposed dataNamePhone numberEmailAddressUsername
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- The misuse of credentials for an internal operations account in the SaaS version of COMSBI and the exposure of personal data held by client companies and organisations became public.
- Further reports revealed that customer information and LINE profile information from multiple companies had been obtained without authorisation.
2 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.