Sarku Japan

On January 13, 2022, Sarku Japan suffered an external system breach (hacking incident) that was publicly disclosed on March 16, 2022, by the Maine Office of the Attorney General. The breach exposed personal information of 28,298 individuals, including 131 Maine residents. Compromised data included names, addresses, dates of birth, and Social Security numbers highly sensitive details that significantly increase the risk of identity theft and fraud. In response, Sarku Japan offered 12 months of identity theft protection services via Kroll to affected individuals. The incident highlights a severe compromise of customer data, with potential long-term financial and reputational repercussions for the company and its customers.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0f9d5952-14ea-453d-92d0-91a5793aaabd.shtml

TPRM report: https://www.rankiteo.com/company/sarku-japan

"id": "sar1013090725",
"linkid": "sarku-japan",
"type": "Cyber Attack",
"date": "1/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 28298,
                        'industry': 'Food & Beverage',
                        'location': 'United States (including Maine)',
                        'name': 'Sarku Japan',
                        'type': 'Restaurant Chain'}],
 'attack_vector': 'External System Breach (Hacking)',
 'customer_advisories': 'Identity theft protection services offered for 12 '
                        'months through Kroll',
 'data_breach': {'data_exfiltration': 'Yes (unauthorized access)',
                 'number_of_records_exposed': 28298,
                 'personally_identifiable_information': ['Names',
                                                         'Addresses',
                                                         'Dates of Birth',
                                                         'Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High (PII including SSNs)',
                 'type_of_data_compromised': ['Personal Information']},
 'date_detected': '2022-03-16',
 'date_publicly_disclosed': '2022-03-16',
 'description': 'The Maine Office of the Attorney General reported that Sarku '
                'Japan experienced an external system breach (hacking) '
                'affecting 28,298 individuals, including 131 Maine residents. '
                'The breach involved unauthorized access to personal '
                'information such as names, addresses, dates of birth, and '
                'Social Security numbers. Identity theft protection services '
                'were offered for 12 months through Kroll.',
 'impact': {'data_compromised': ['Names',
                                 'Addresses',
                                 'Dates of Birth',
                                 'Social Security Numbers'],
            'identity_theft_risk': 'High (PII exposed)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Notification via Maine Office of the '
                                        'Attorney General; Identity theft '
                                        'protection offered to affected '
                                        'individuals',
              'third_party_assistance': 'Kroll (Identity Theft Protection '
                                        'Services)'},
 'title': 'Sarku Japan Data Breach (2022)',
 'type': 'Data Breach'}