Japan Digital Agency's shared government work environment GSS breached via VPN flaw; about 246,000 civil servant records at risk

Japan's Digital Agency said on September 11 that its Government Solution Service (GSS) was accessed without authorization: on June 25 it detected mass file access using a maintenance account, and on July 9 confirmed a third party had entered through a VPN device vulnerability ^[1]. About 246,000 personal data records may have leaked, covering staff and civil servants of ministries using GSS and related contractors, including names, emails, phones and addresses, but no general public data, My Number, bank accounts or pension numbers ^[1]. People who may be affected should beware of emails, calls and texts posing as the Digital Agency or related bodies, and not open unfamiliar links or attachments or enter passwords or card details ^[1].

Industries mainly affected: Government

1. Beware of emails, calls and texts impersonating the Digital Agency or related bodies ^[1].
2. Do not open unfamiliar links or attachments or enter passwords or card details .