Sonicmoov COMSBI breach exposes client organizations’ personal data
Credentials for an internal operations account were misused in the SaaS version of Japanese company Sonicmoov’s LINE-integrated service COMSBI, exposing personal data held by multiple client companies and organizations. The exposed information included names, phone numbers, email addresses, postal addresses, LINE profiles, and user IDs. The total scale of the breach was not disclosed.
Key facts
- Affected organization
- Sonicmoov
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal data held by multiple client companies and organizations exposed; total scale undisclosed
- Cause / method
- Misuse of credentials for an internal operations account
- Location
- Japan
If your data was exposed
Exposed dataNamePhone numberEmailAddressUsername
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- The misuse of credentials for an internal operations account in the SaaS version of COMSBI and the exposure of personal data held by client companies and organizations became public.
- Further reports revealed that customer information and LINE profile information from multiple companies had been obtained without authorization.
2 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.