Japan Digital Agency says VPN breach may have exposed 246,000 people

Japan's Digital Agency said personal information for about 246,000 people may have been exposed after an attacker exploited an unpatched VPN vulnerability in a device used by the Government Solution Service. The agency detected suspicious activity involving a maintenance administrator account on June 25 and said the intrusion, which began around late May, was discovered July 9. It cut external communications to the compromised equipment that day. The potentially exposed records include names, email addresses, phone numbers and physical addresses.