Japan’s Digital Agency says VPN flaw exposed 246,000 personnel records

Japan’s Digital Agency says VPN flaw exposed 246,000 personnel records
Japan’s Digital Agency disclosed a breach that may have exposed 246,000 record rows of employee-related personal data after attackers exploited a vulnerability in a VPN device used by the Government Solution Service. The agency says no My Number, bank, or pension data was exposed, and it has not found confirmed misuse so far, but it warned of phishing and impersonation risks. #JapanDigitalAgency #GovernmentSolutionService #VPN

Keypoints

  • The breach may have exposed around 246,000 record rows of personal information.
  • Attackers gained access by exploiting a VPN device vulnerability used by GSS.
  • Exposed data included names, email addresses, phone numbers, and some physical addresses.
  • No My Number IDs, bank-account details, or pension numbers were compromised.
  • The agency warned victims about phishing and impersonation attempts and set up support.

Read More: https://www.bleepingcomputer.com/news/security/japans-digital-agency-says-vpn-flaw-exposed-246-000-personnel-records/