Prestige International confirms breach of up to 5.5M records
Tokyo-listed Prestige International confirmed that attackers stole data from a system of subsidiary Prestige Core Solution (PCS) used to take and dispatch roadside-assistance requests. Up to about 5.5M records, a count that includes duplicates, hold names, addresses, phone numbers, emails, vehicle details (registration and chassis numbers), accident and breakdown request info and some bank-account details; ENEOS says up to 8,500 of its car-lease contracts are affected. The system was shut down, police and Japan's privacy regulator were notified, and phishing posing as insurers or roadside services is expected.
What happened
Tokyo-listed Prestige International confirmed that attackers stole customer data from a system of subsidiary Prestige Core Solution used for roadside-assistance requests from client companies. Up to about 5.5M records are affected, a count that includes duplicates; the number of unique people is still being determined.
Why it matters
Data includes names, addresses, phone numbers, emails, vehicle details (registration and chassis numbers), accident and breakdown request info and some bank-account details. ENEOS says up to 8,500 of its car-lease contracts are affected, and Sony Assurance is still checking its customers' exposure, with its roadside desk hard to reach. Records with these details enable targeted scams and phishing.
What to do
Follow Prestige's communications; the company disabled stolen credentials, shut down the system and notified police and Japan's privacy regulator. Warn customers about phishing posing as insurers or roadside services.
For the technical team
- Affected
- Prestige International Sistema de negócios usado pela subsidiária Prestige Core Solution (PCS) para receber e despachar pedidos de assistência · Business system used by subsidiary Prestige Core Solution (PCS) for roadside-assistance requests. Client companies cited: ENEOS (up to 8,500 car-lease contracts affected) and Sony Assurance (exposure still being checked).
- Exploitation
- Intrusion confirmed by Prestige International itself. According to DailyDarkWeb, no actor, ransomware claim or CVE has been disclosed.
- Fix
- No fix applicable: stolen credentials disabled and the system shut down. Police and Japan's privacy regulator notified.
- Vector
- Use of stolen credentials against a business system of subsidiary Prestige Core Solution (PCS) that takes and dispatches roadside-assistance requests. Intrusion detected Oct. 29; the stolen credentials were disabled, but access continued and the system was shut down Oct. 30.
- More details
- No credit card data leak confirmed. The count of up to 5.5M records includes duplicates. DailyDarkWeb expects phishing posing as insurers or roadside services.
Timeline
Prestige International confirmed the intrusion and estimated up to 5.5 million affected records.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
