Japanese companies SKI Management and Mitsui Fudosan report data breaches

Two Japanese companies, SKI Management and Mitsui Fudosan, have reported potential data breaches resulting from unauthorized access to their systems.

SKI Management announced that an employee fell victim to a support fraud scam on August 7. While searching for information on AI tools, the employee was prompted to contact a fake support center and subsequently installed remote-control software. Log analysis via Lanscope confirmed the deletion of approximately 4,000 files containing personal data, including names, dates of birth, genders, addresses, phone numbers, and email addresses of customers. While the company stated there is no evidence of data being exfiltrated externally, they cannot entirely rule out a leak due to the remote access. Digital forensic investigations by external experts are planned.

Mitsui Fudosan reported that on August 28, some systems used by the group were accessed without authorization. This incident may have compromised the information of up to 55,000 individuals, including up to 19,000 employees and officers (names, email addresses, departments, and titles) and up to 36,000 external stakeholders (email addresses and display names). The company has invalidated the credentials used in the breach and increased system monitoring, while advising stakeholders to remain vigilant against potential phishing attempts.