Tech LINE: 400k personal records leaked in data breach

Today, LY Corp. reported a massive data breach, including 440,000 items of personal data, 300,000 of which linked to Line messaging app users, that were leaked due to unauthorized access to an affiliate's computer system in October. The leaked data did not contain information regarding bank accounts, credit cards or chat messages in Japan's Line app, a popular social communications tool. The company said there have been no reports of misuse so far. It said the leaked data included users' age groups, gender, service use histories and information regarding the company's business partners and employees, such as email addresses, names and affiliations.

The leakage was caused when malware infected a computer owned by an employee of a subcontractor used by the company's South Korea-based affiliate, Naver Cloud Corp., it said. Naver Cloud and LY share an in-house system for dealing with employee and other personnel information managed with a common authentication system, which allowed unauthorized access into LY's internal system, the company said. The company initiated an investigation after detecting suspicious access on 17 October, concluding by 27 October that it was highly likely an external breach. The initial unauthorized access occurred on 9 October.

Click to expand...

Sounds like a nothing-burger. --nothing to worry about. That much data about anyone is already out there and being traded/sold anyway.

On the plus side, a beneficial wakeup call for their security teams (and others working there), to increase vigilance so that there's no 'next time' or more dangerous leaks going forward.