InfoSecBulletin Cybersecurity for mankind
SoftBank has disclosed that personal information of more than 137,000 mobile subscribers—covering names, addresses, and phone numbers—might have been leaked by a contracted outsourcing firm. In response, the company intends to end its contract with the provider and will collaborate with the police to assess future actions.
SoftBank announced that 137,156 personal information records, including names, addresses, and phone numbers of SoftBank and Y! Mobile users, may have been leaked from an outsourced company called “UF Japan.”
High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation
SoftBank: Over 137,000 personal info leaked
Alert
Trend Micro Apex One Flaw Allow Attackers to Inject Malicious Code
Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Action
Adobe Releases Patch Fixing 254 Vulnerabilities With High-Severity Security Gaps
Alert
40,000 + live internet cameras exposed globally !
Microsoft patch Tuesday fix exploited zero-day and 65 vuls patched
84,000+ Roundcube instances vulnerable to actively exploited flaw
CVE-2025-24016
Critical Wazuh RCE Actively Exploited by Mirai Botnets
CISA Issues Seven Advisories for Industrial Control Systems (ICS)
Credit card and account numbers remained safe. The incident was uncovered after the company investigated a third-party report in March.
The management of entry and exit protocols on the floors housing personal data was poorly handled by the outsourced company, resulting in a potential violation last December when a previous employee from a partner organization may have illegally entered the site and taken personal information.
In addition, the personal information was made accessible to people unrelated to the company’s work.
NHK reported, The company has terminated its contract with the outsourced company and is consulting with the police to consider future responses.
SoftBank commented, “We take the serious incident seriously, and will strengthen management of outsourced companies that handle personal information to prevent recurrence.”
Trend Micro Apex One Flaw Allow Attackers to Inject Malicious Code
