SHINDO4

DAIKO XTECH

DAIKO XTECH Co., Ltd.

Personal data729organizations

POSSIBLE LEAKPhone number / Full nameUnauthorized access · Investigating

Open in the live monitor ▶
Disclosed
Jun 3, 2025
Detected
Apr 7, 2025
Detection to disclosure
57 days
Leak
Leak possible
Type
Unauthorized access
Status
Investigating
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityStaff names
ContactPhone numbers assigned by JAEA, Email addresses assigned by JAEA

How many

  • Client companies whose data may have leaked 729 organizations

Who is affected

  • Client companies
  • JAEA staff listed in the 2017 internal phone directory

Cause

A file transfer server at the contractor DAIKO XTECH was compromised

Timeline

  1. Report from the contractor to JAEA
  2. Investigation conclusion
  3. Date of the Security NEXT report (JAEA announcement)

What you should do

  1. Don't open links in emails from this company. The apology email itself may be fake
  2. Treat refund or apology calls and texts as scams. Call back only on the number from the official site
  3. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources