Japanese energy firm loses drive with data of 10.9 million clients
Summary
Kyushu Electric Power Co., Inc. has reported a physical security incident where an external hard drive containing the personal data of over 10.9 million clients was lost. The drive held information such as names, addresses, phone numbers, and contract details, though it was reportedly encrypted.
IFF Assessment
FOE
The loss of sensitive customer data represents a significant breach and potential harm to individuals, making it bad news for defenders.
Defender Context
This incident highlights the ongoing risks associated with physical data storage and the critical need for robust data handling policies and physical security measures, even for encrypted drives. Defenders should be aware of potential supply chain risks and the impact of human error in data management.