Cyber Incident Victim: Tokyo Olympics Organizing Committee
Date:
Jun 2021
Location:
Japan
Summary
The Tokyo Olympics Organizing Committee experienced a data breach involving unauthorized access to an information-sharing platform developed by Fujitsu. Personal information was compromised for approximately 170 individuals participating in security management activities and cybersecurity preparedness drills related to the event. The incident exposed details of personnel directly involved in safeguarding operations against potential cyberattacks during the Games.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On June 4, 2021, the Tokyo Olympics Organizing Committee confirmed a data breach resulting from unauthorized access to an information-sharing platform developed by Fujitsu Ltd. The incident involved the leakage of personal information belonging to approximately 170 individuals directly involved in security operations planning for the upcoming Olympic Games. These individuals had participated in a cybersecurity drill hosted by Japan’s National Cybersecurity Center, which was designed to prepare for potential cyberattacks targeting the international sporting event. The breach occurred through compromised access credentials to Fujitsu’s proprietary collaboration tool, though the specific method of unauthorized entry was not disclosed. No technical details about the vulnerability exploited or the duration of unauthorized access were provided by investigators or the organizing committee.
The compromised personal data pertained exclusively to personnel engaged in critical security management roles, though the exact types of exposed information (such as names, contact details, or credentials) were not specified in public reports. The incident raised concerns about potential targeting of Olympic security infrastructure, given the victims’ direct involvement in cyberattack preparedness exercises. Organizers did not report evidence of operational disruptions to Olympic systems or further malicious activity stemming from the breach. Japan’s National Cybersecurity Center collaborated with the organizing committee to assess the intrusion, but no containment measures, forensic findings, or attacker attribution details were released publicly. The breach marked the latest in a series of cybersecurity challenges faced by Olympic organizers ahead of the rescheduled 2020 Games.