Personal Information Protection Commission

They updated everything.

And they have reported the incident to Japan's Personal Information Protection Commission in accordance with Japanese law.

So if you were one of the ones that placed an order between October 22nd, uh, 2 20 PM JST to shortly before 11 PM G uh, GST.

So within that 40 minutes, um, that's what they are looking at specifically.

Prime Minister Pedro Sanchez says the focus is not only on investigations, but also on solutions to strengthen the country's high-speed rail system.

Data from Japan's Personal Information Protection Commission suggests the cumulative total of personal data leaks have affected roughly twice Japan's population since the start of the current fiscal year in April.

There were more than 2,000 incidents of unauthorized access to personal information.

830 incidents were reported in the first half of October alone.

The next day, Capcom established an internal incident response headquarters to gather information, and it confirmed what information was affected and reported it to its External Information Technology Security Oversight Committee.

Finally, on Wednesday, Capcom reported the breach to the Osaka Prefecture Police and Japan's Personal Information Protection Commission.

The company continues to investigate the incident.

In the future, Capcom aims to implement prevention measures and strengthen its information security framework.

According to IGN, the information accessed by a third party on October 19th included account creation and last login timestamps, login counts, and the client IP address used during the last login.

Capcom has reported the incident to Osaka Prefectural Police and Japan's Personal Information Protection Commission, but it has not disclosed how the breach occurred.

Reporting for Cybercrime Radio, I'm David Browey.

For more information on the latest news in cybercrime and cybersecurity, visit cybercrimewire.com.

The company detected suspicious activity and confirmed unauthorized access on October 19th, launched an immediate investigation, and by October 20th had confirmed customer data was compromised.

On October 21st, Capcom reported the incident to the police and Japan's Personal Information Protection Commission.

Capcom identified the intrusion method and implemented security measures, but has not disclosed how the attackers got in.

Online services remain unaffected and affected customers will be notified in stages, likely because of the sheer volume of those affected.

Burger King Japan says the server held no credit card numbers and it found no evidence the attackers got user credentials.

It reported the breach to Japan's Personal Information Protection Commission and brought in outside experts to figure out how the attackers got in.

It's also warning customers to watch for emails, texts, and calls impersonating the brand.

The popular chain runs 350 restaurants in Japan, and Burger King Japan joins a long list of Japanese victims hit this year in various hacks, including IDC Frontier, Nikkei, KDDI, Sakura Internet, KO Railway, and Times Car.

The exposed data includes customers' names, phone numbers, email addresses, dates of birth, gender, prefecture, and members' IDs.

BK Japan reported the breach to Japan's Personal Information Protection Commission and is working with security experts to find out how the attacker got into the system.

Reporting for Cybercrime Radio, I'm Scott Schober, author of Hacked Again.

New every weekday, the Cybercrime Wire is brought to you by Cybercrime Magazine, page one for the cybersecurity industry at cybercrimemagazine.com. For more breaking news, visit cybercrimewire.com. [outro music]