NTT telco breach allegedly impacts thousands of corporate clients

The Japanese telecommunications services provider, NTT Communications Corporation (NTT), released notification letters informing at least 18,000 corporate clients about a data breach. Reports revealed that the event has resulted in the access that their data was exposed during a cybersecurity incident.

The data breach was detected last month, although it is unclear when the hackers first accessed this Japan-based telecom’s servers. The announcement also explained this detail, revealing that the corporation learned about the unauthorised access on February 5, which impacted its facilities.

The day following the discovery, the company confirmed that some information may have leaked externally.

 

NTT insisted that the attack may have compromised its customers’ personal information.

 

NTT claims that the hackers infiltrated its ‘Order Information Distribution System,’ which contained information on about 17,891 business customers (companies). However, the firm stated that there is no indication that all customers’ personal information has been affected.

Still, the hackers may have stolen various data types, such as customer name (registered contract name), customer representative’s name, contact numbers, telephone numbers, email addresses, physical address, and service usage information.

On the other hand, the issue had no bearing on contracts for corporate cell phones and mobile phones delivered directly by NTT Docomo. The campaign may have only caused such damage as immediately restricting the threat actor’s access to the compromised system the day following its discovery.

However, on February 15, the investigation discovered that the attackers had switched to another NTT network device. This gadget was quickly detached to prevent any additional lateral movement, and the company is now convinced that the threat has been completely contained.

NTT has stated that it will not send personalised alerts to impacted clients; hence, the only notice will be posted publicly on its website. NTT is Japan’s largest telecommunications service provider, which is why it is frequently targeted by cybercriminals seeking to disrupt operations or steal vital data from its networks.

Therefore, potentially impacted parties should be wary of unwanted communications as the threat actors may use the alleged stolen details to execute other attacks through other tactics.