Kyushu Electric says missing drive may expose data of 10.9 million customer accounts
Summary
Kyushu Electric Power says a missing backup drive may have exposed personal data tied to up to 10.9 million customer accounts. The company is investigating; no bank-account or credit-card data was on the drive.
Key points
- Kyushu Electric Power said an external drive used for backups went missing from a server-room cabinet that was found unlocked.
- The company said the drive may have held data for up to 10.9 million customer accounts, including names, service addresses, electricity usage and phone numbers.
- No bank-account or credit-card information was stored on the drive.
- The company has interviewed personnel who entered the server room but has not located the drive; it is investigating possible unauthorized removal.
- Media reports say 57 people had access to the server room and the company filed a police report on June 4.
- Kyushu Electric reported the incident to Japan’s Personal Information Protection Commission and other authorities.
Article Details
- Victim Organization
- Kyushu Electric Power Co., Inc.
- Incident Type
- Loss of an external storage drive, creating a potential exposure of customer data; unauthorized removal is under investigation.
- Data Types Exposed
- Customer names
- Service location addresses
- Electricity usage data
- Telephone numbers
- Names of retail electricity providers
- Other related information
- Affected Records
- Up to 10.9 million customer accounts may be affected.
- Operational Impact
- The external drive was missing from a server room cabinet. The company investigated and interviewed personnel who had access but did not locate the drive. No service disruption was reported.
- Ransom Or Extortion
- None reported.
- Claim Status
- confirmed