Threat Intelligence Brief
Curated summary with source attribution
Source: mainichi.jp
Threat Risk: Medium
Victim: Nomura Investor Relations and Bic Camera
Incident: Unauthorized access to internal and contractor systems resulting in data leaks.
Impact: Exposure of personal data, including names and email addresses, for millions of individuals.
Attacker: Unidentified threat actors
Analysis: Two separate entities, a Nomura subsidiary and Bic Camera, suffered data breaches involving personal information. While Bic Camera’s leak originated from a third-party contractor, Nomura’s breach directly impacted its institutional information services. The scale is significant, with nearly 15 million records potentially exposed in the retail incident.
Recommendations: Audit third-party vendor security controls and access permissions; Implement multi-factor authentication (MFA) across all client-facing systems; Notify affected users and provide guidance on recognizing phishing attempts
Source: The Mainichi
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source