"Notice and apology regarding the possibility of personal information leaking due to unauthorized server access"
April 17, 2024
We have recently discovered that the server of our global website was illegally accessed, resulting in the sending of phishing emails by spoofing. Although spoofed emails were sent, it has not been confirmed that emails were sent to any personal information stored on the server, and there has been no confirmation of any personal information leaks.
We deeply apologize for the inconvenience caused to those who received the phishing email and for the concern and trouble this incident has caused to so many people.
We ask that you delete any suspicious emails you receive from us without opening them or clicking on any URLs.
At this time, no damage caused by the leak of personal information has been confirmed, but the possibility of a leak cannot be denied. We will continue to investigate and take any necessary measures, as well as implement measures to prevent recurrence.
1. Overview
On April 5, 2024, it was discovered that phishing emails were being sent from a server used to operate an global website. It was confirmed that the server was being used as a springboard for sending phishing emails through unauthorized access from overseas. The cause was a vulnerability in an application used on the server, which was exploited to send spoofed emails.
2. Our response
Since it was determined that the unauthorized access in this case came from a specific IP address, we blocked access from that IP address and redeveloped the application to resolve the vulnerability.
3. Personal information that may have been leaked
① Name ② Email address ③ Country/region ④ Affiliation (salon name, clinic name, affiliation, etc.)
⑤Phone number ⑥Address ⑦Gender
Regarding this matter, at this time, we have not found any evidence that personal information has been leaked to the outside, and have not received any reports of secondary damage such as the unauthorized use of personal information as a result of this matter. However, we are continuing to investigate the possibility of personal information being leaked.
We take this incident very seriously and will make every effort to prevent a recurrence, including improving our security system and strengthening monitoring of all websites and networks.
<Inquiries regarding this matter>
Takara Belmont Corporation
Customer Information Consultation Desk Email address: gbts-info001@takara-net.com