IIJ サイバー攻撃こうげき メールアカウントなど31万まん件けん漏ろうえい確認かくにん

IIJ Internet Initiative Japan, a major telecommunications company providing services such as email security, announced that they have confirmed the leakage of information related to approximately 310,000 customer email accounts and passwords due to unauthorized access from a cyber attack.

IIJ announced on the 15th of this month that the email security service they provide for corporations was accessed illegally due to a cyberattack.

The company initially stated that information such as emails of 4,072,650 customers might have been leaked, involving a maximum of 6,493 contractors and email accounts. However, subsequent investigations confirmed that email accounts and passwords of 312,288 cases with 132 contractors were actually leaked.

In addition, it is reported that information such as the body and recipients of emails was leaked at six other contractors, and authentication information for third-party cloud services set to operate in conjunction with this service was leaked at 488 contractors.

Furthermore, it is said that the cause of the unauthorized access was due to the exploitation of vulnerabilities in third-party software used by this service.

IIJ stated, We sincerely apologize for causing significant inconvenience to our customers and stakeholders, and they are considering strengthening security measures and monitoring systems to prevent recurrence.

The software Active Mail may have been misused. According to IIJ, the software that caused the unauthorized access is Active! mail provided by the company Qualitia in Chuo Ward, Tokyo.

According to the companys website, Active! Mail is a service that allows email exchanges via internet browsing software and is widely used by municipalities, companies, universities, and others.

The vulnerability exploited in the unauthorized access was an unknown and undiscovered one, and Qualitia is urgently announcing a revised version of the product on its homepage on the 16th of this month, urging users to apply it.