The name, address, birth date, basic pension number totaled 1.25 million leaks, what caused the virus mail to be opened by the staff of the Japan Pension Organization

Today as of June 1, 2015 the Japan Pension Corporation announced the leak of personal information. It was Thursday, 28 May (Thursday), and it took 4 days until the presentation.

[PDF file] About the outflow of personal information by the Japan Pension Organization
http://www.nenkin.go.jp/n/data/service/0000150601ndjIleouIi.pdf


According to the announcement, the combination of information leaked and the number of cases is as follows.

Basic pension number + name: Approximately 31,000 cases
Basic pension number + name + birth date: about 1167 thousand cases
Basic pension number + name + birth date + address: about 52,000 cases
Total: about 125,000 cases

The reason is that when dealing with e-mails, we opened the attachment with the virus, which caused unauthorized access, and the information leaked out. PCs already infected with virus are already quarantined and antivirus software companies are analyzing detailed information and are removing it. In addition, it is said that the police have already notified it, and they are requesting investigation. In addition, in order to prevent further leakage of information to the outside, all offices are blocking connection to the Internet.

Confirmation of whether my information flowed out will start tomorrow from Tuesday, June 2, and in case it is applicable, we will inform you separately and apologize. Also, if applicable, the basic pension number will be changed.

In addition, the special telephone ticket window is the following toll-free number.

Toll free 0120-818211
Reception hours: 8: 30 ~ 21: 00 (same weekday and Saturday and Sunday)
※ However, the above reception hours will be from today to June 14th, after that it will be announced separately on the official website again

2015/06/02 10:45 Addendum
The subject of the e-mail that triggered the leakage of personal information was "Opinions concerning (draft) about the review of the welfare pension fund systemIt is said that it arrived on Friday, May 8th. First of all it was infected because it opened this mail. Although this PC was isolated, the rest of the PC continued to connect to the net as it was, and it was confirmed that there was a PC infected on May 8th (Friday)I did not notify other staffSo, even more than ten mails arrived, again infected another PC, remotely operated and leaked out. As for why personal information was found in the infected PC, "From the social insurance online system that manages insurance premiums and payment status It was in a server where only data necessary for work was transferred by CD-ROM etc."For. Eventually there were dozens of infected viruses.

Following these trends, we consulted with the Metropolitan Police Department on May 19th (Tuesday) and we surveyed it. On May 28th (Thursday), about 1.25 million information leaks were discovered.

Also, among the leaked personal informationIt turned out that the password for personal information protection was not set for 550,000 cases, I also know that this is a complete "internal rule violation".

In addition, it is said that there is a possibility of "address change by using the information on the spilling name, basic pension number, date of birth, and information on pension payment amount etc. is further drawn", but at the press conference, the Tokushima Yasuo's director said, "We will also consider preservation to a server completely blocked from the outside, but we need to change the way of work greatly, it can not be done easily," and personal information The possibility that an outflow will occur will remain for a while.

Part of the interview can be seen in the following movie.

Name, date of birth, address ... · 1.25 million pension information leaks (15/06/01) - YouTube