In the cloud service of an American IT company, it is pointed out that customer information etc. may be seen from the outside due to improper settings, and the system of local governments nationwide using this service has improper settings It turned out that unauthorized access that seems to have been aimed at is occurring one after another, and the Ministry of Internal Affairs and Communications is collecting information.
This is "Salesforce", which is operated on the cloud by the American IT company Salesforce.com and manages customer information, etc. Due to improper setting of access authority to information, outsiders can use customer information, etc. The Cabinet Cyber Security Center is calling attention to the fact that private companies have suffered a series of damages.
Of the local governments nationwide that have introduced this service, as of the 12th, personal information registered by residents in the system of at least 11 cities is in a state where it can be viewed from the outside or is being accessed illegally. I learned from interviews with each local government.
Most of the systems are registered with information on thousands to tens of thousands of people. Of these, in Saijo City, Ehime Prefecture and Izumiotsu City, Osaka Prefecture, the names and phone numbers entered in the health examination reservation system are the largest. In addition to being viewed by about 1000 people, in Kobe City, it is an app that asks citizens to post local issues, and in Tokyo and Higashimurayama City, it is an app that sends disaster prevention information, and access to registrant information is possible. Since it was confirmed, the Ministry of Internal Affairs and Communications is collecting information.
All of these local governments outsourced the introduction and setting of services to the system company "Ryobi Systems" in Okayama City.
Ryobi Systems has changed the settings and is investigating access from the outside, so he commented on the homepage, "We deeply apologize for the inconvenience and concern to our customers." I will.
Salesforce.com commented, "We take our customers' concerns seriously and will continue to support them in order to continue to support them."