Non-Zero-Day VPN Flaw Left Japan’s Government Shared Network Platform Exposed: 246,000 Records at Risk

Japan’s Digital Agency reported that attackers exploited a vulnerability in a VPN device used by the Government Solution Service (GSS). Approximately 246,000 records belonging to government employees, public officials and contractors across 23 ministries and agencies may have been exposed. The incident was detected on June 25, the VPN exploitation was confirmed on July 9, and the disclosure was made on September 11.