Breaches and incidents
Sagawa Express: parcel tracking system breached, up to about 53.23M personal records (with duplicates) possibly leaked
Sagawa said unauthorized access to its internet cargo system (package inquiry service) was found at 7:30 am on 30 Sep.
- Disclosed
- Verification
- Checked against a primary source
What happened
- Sagawa said unauthorized access to its internet cargo system (package inquiry service) was found at 7:30 am on 30 Sep; its 23 Oct fifth report puts possibly leaked personal data at up to about 53.23M records including duplicates: sender and recipient name, address and phone from shipping labels (21 Jun to 30 Sep), contract customer lists, and Smart Club member data.
- Root cause: not disclosed; the company is reviewing access control, vulnerability and privilege management and monitoring.
- No attacker named.
- External access was blocked 1 Oct, the PPC notified 1 Oct (joint report with shippers planned), and package inquiry resumed 23 Oct while several web services remain suspended; no misuse confirmed.