INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).
COSMO hacker group leaks 3,000,000 people's personal data via internet
Executive Summary
AI-generated
On November 2, Japan's COSMO hacker group leaked the personal information of approximately 3,000,000 people from Japanese beauty platform Atcosme. The leaked data includes name, address, and other identifying information, as well as skin and hair type characteristics. This incident affects users who were registered under the 'Atcosme Common ID' before October 28, when some user information was externally leaked. Istyle, an operational arm of Atcosme, confirmed that login passwords and credit card information were not included in the data. The company has taken measures to prevent further spread and is investigating the cause with an external security expert. As of November 2nd, no misuse of personal information or secondary damage has been confirmed, but users are advised to be cautious of fake emails and input their personal information carefully.
Technical Mitigations AI-generated
• Patch Atcosme's login system to address potential vulnerabilities in the 'Atcosme Common ID' registration process.
• Implement a more robust security audit on Istyle's systems, focusing on identifying and patching any entry points exploited by the attackers.
• Block or hunt for suspicious emails sent using the 'cosme.net' domain that may be phishing attempts to gather additional personal information.
