2021/10/27Information To Customers

Notice Concerning Unauthorized Access to KLab IDs

KLab Inc.(TSE Prime Market: 3656)

We confirmed that there was an unauthorized external login to the KLab ID service that we provide (hereinafter referred to as "service"). We deeply apologize for the inconvenience and concern caused to our customers.

This unauthorized login is likely to be an unauthorized login (password list-type attack) using an ID and password obtained from outside the company.

1. Background
・October 24, 2021 (01:09 or after): unauthorized logins to this service occurred
・October 26, 2021 (16:50): KLab detected the occurrence of unauthorized logins
・October 26, 2021 (22:57): completed mandatory two-step authentication for all KLab ID accounts

2. Status of Unauthorized Logins
1) Number of users of this service that were confirmed to have unauthorized logins: 2,846
*as of October 26, 2021 (18:00)

2) Information That May Have Been Viewed
・Customer information registered in this service (e-mail address, secret questions and answers, date of birth, gender, language)
・Application name in collaboration with this service
・All information that can be viewed in the application linked to this service

The passwords for this service are stored in a non-recoverable form (one-way encryption, salted hash) and the company has not confirmed any passwords that may have been compromised.

3. Response
In order to protect your account more adequately, we have implemented an e-mail based two-step authentication system required for all users. Two-step authentication is a mechanism for authenticating an account using a confirmation code in addition to the ID and password at login.
Reference: https://www.id.klabgames.net/help

4. Request to Customers
Customers using this service are asked to take the following measures to prevent unauthorized logins.

1) Set a password that is different than what is used for other company services
2) Turn on login notifications

The password can be changed from the following URL.

https://www.id.klabgames.net/recover/password


We sincerely apologize for the inconvenience and concern caused to our customers.

Return to List Page

Related News