Cyberattacks continue to menace Japan as more firms disclose data breaches

According to The Japan Times, Yamato Transport said that 5.31 million sets of personal information belonging to some users of its deferred payment service were compromised[1]. The paper reports the data included names, addresses and phone numbers[1], collected since October 2018.The Japan Times reports that business daily publisher Nikkei said that about 1.83 million sets of personal information[1] were taken after a cloud service used for system development was fraudulently accessed.[1]Europe Says, which carried the same report, says Park24, the parent company of the operator of the Times Car vehicle-sharing service, said that it will finish deleting images of identity verification documents[2] by the end of this month.According to The Japan Times, railway operator Keio said that cyberattackers had claimed to have published its information[1], and outside experts believe that Keio was targeted in a ransomware attack by the international hacker group Qilin.[1]The paper also reports that Fancl and affiliate Attenir announced a data breach affecting a total of about 830,000 customers[1]. It adds that Japan Post said data on about 600 users[1] of one of its online services may have been exposed. In it, the office named three entry routes: exploited web-system vulnerabilities, compromise through the supply chain, and poorly secured data.[3]Earlier in October, Chief Cabinet Secretary Minoru Kihara told reporters, as quoted by The Japan Times, that "it is not clear whether these incidents are related"[4].