{"id":61516,"date":"2023-12-08T20:25:36","date_gmt":"2023-12-08T11:25:36","guid":{"rendered":"https:\/\/monolith.law\/cs\/?p=61516"},"modified":"2024-03-29T17:29:00","modified_gmt":"2024-03-29T08:29:00","slug":"information-leak-crisis-management","status":"publish","type":"post","link":"https:\/\/monolith.law\/cs\/general-corporate\/information-leak-crisis-management","title":{"rendered":"Co se m\u016f\u017eeme nau\u010dit z role krizov\u00e9ho managementu a pr\u00e1vn\u00edk\u016f v p\u0159\u00edpad\u011b \u00faniku 650 000 informac\u00ed z firmy T\u014dken Corp"},"content":{"rendered":"\n<p>Dne 1. dubna 2005 (v roce 2005 podle gregori\u00e1nsk\u00e9ho kalend\u00e1\u0159e) byl pln\u011b zaveden Japonsk\u00fd z\u00e1kon o ochran\u011b osobn\u00edch \u00fadaj\u016f, a podnikatel\u00e9, kte\u0159\u00ed zach\u00e1zej\u00ed s osobn\u00edmi \u00fadaji, jsou povinni p\u0159ijmout opat\u0159en\u00ed pro jejich bezpe\u010dn\u00e9 \u0159\u00edzen\u00ed. P\u0159esto v\u0161ak nedoch\u00e1z\u00ed k zastaven\u00ed incident\u016f t\u00fdkaj\u00edc\u00edch se \u00faniku osobn\u00edch \u00fadaj\u016f.<\/p>\n\n\n\n<p>V p\u0159\u00edpad\u011b incidentu s \u00fanikem informac\u00ed je zvl\u00e1\u0161t\u011b d\u016fle\u017eit\u00fd postup a rychlost reakce. Zejm\u00e9na u mal\u00fdch a st\u0159edn\u00edch podnik\u016f, kter\u00e9 nemaj\u00ed specializovan\u00fd person\u00e1l pro informa\u010dn\u00ed bezpe\u010dnost, m\u016f\u017ee b\u00fdt obt\u00ed\u017en\u00e9 rychle rozhodnout, jak reagovat.<\/p>\n\n\n\n<p>V tomto \u010dl\u00e1nku vysv\u011btl\u00edme syst\u00e9m krizov\u00e9ho \u0159\u00edzen\u00ed v p\u0159\u00edpad\u011b \u00faniku informac\u00ed na z\u00e1klad\u011b reakce spole\u010dnosti T\u014dken Corporation na incident s \u00fanikem informac\u00ed.<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_53 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/information-leak-crisis-management\/#Prehled_o_uniku_informaci\" title=\"P\u0159ehled o \u00faniku informac\u00ed\">P\u0159ehled o \u00faniku informac\u00ed<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/information-leak-crisis-management\/#Odhaleni_neopravneneho_pristupu_a_prvotni_reakce\" title=\"Odhalen\u00ed neopr\u00e1vn\u011bn\u00e9ho p\u0159\u00edstupu a prvotn\u00ed reakce\">Odhalen\u00ed neopr\u00e1vn\u011bn\u00e9ho p\u0159\u00edstupu a prvotn\u00ed reakce<\/a><ul class='ez-toc-list-level-3'><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/information-leak-crisis-management\/#Klicove_body_prvotni_reakce\" title=\"Kl\u00ed\u010dov\u00e9 body prvotn\u00ed reakce\">Kl\u00ed\u010dov\u00e9 body prvotn\u00ed reakce<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/information-leak-crisis-management\/#Tiskova_zprava_po_odhaleni_uniku_informaci\" title=\"Tiskov\u00e1 zpr\u00e1va po odhalen\u00ed \u00faniku informac\u00ed\">Tiskov\u00e1 zpr\u00e1va po odhalen\u00ed \u00faniku informac\u00ed<\/a><ul class='ez-toc-list-level-3'><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/information-leak-crisis-management\/#Obsah_uniklych_informaci\" title=\"Obsah unikl\u00fdch informac\u00ed\">Obsah unikl\u00fdch informac\u00ed<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/information-leak-crisis-management\/#Opatreni_pro_budoucnost\" title=\"Opat\u0159en\u00ed pro budoucnost\">Opat\u0159en\u00ed pro budoucnost<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/information-leak-crisis-management\/#Otazky_a_odpovedi_tykajici_se_nahrady_skody\" title=\"Ot\u00e1zky a odpov\u011bdi t\u00fdkaj\u00edc\u00ed se n\u00e1hrady \u0161kody\">Ot\u00e1zky a odpov\u011bdi t\u00fdkaj\u00edc\u00ed se n\u00e1hrady \u0161kody<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/information-leak-crisis-management\/#Nacasovani_prvni_tiskove_zpravy_zanechava_otazky\" title=\"Na\u010dasov\u00e1n\u00ed prvn\u00ed tiskov\u00e9 zpr\u00e1vy zanech\u00e1v\u00e1 ot\u00e1zky\">Na\u010dasov\u00e1n\u00ed prvn\u00ed tiskov\u00e9 zpr\u00e1vy zanech\u00e1v\u00e1 ot\u00e1zky<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/information-leak-crisis-management\/#Klicove_body_oznameni_hlaseni_a_zverejneni\" title=\"Kl\u00ed\u010dov\u00e9 body ozn\u00e1men\u00ed, hl\u00e1\u0161en\u00ed a zve\u0159ejn\u011bn\u00ed\">Kl\u00ed\u010dov\u00e9 body ozn\u00e1men\u00ed, hl\u00e1\u0161en\u00ed a zve\u0159ejn\u011bn\u00ed<\/a><ul class='ez-toc-list-level-3'><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/information-leak-crisis-management\/#V_pripade_trestne_cinnosti\" title=\"V p\u0159\u00edpad\u011b trestn\u00e9 \u010dinnosti\">V p\u0159\u00edpad\u011b trestn\u00e9 \u010dinnosti<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/information-leak-crisis-management\/#Pokud_existuje_moznost_uniku_osobnich_kreditnich_informaci\" title=\"Pokud existuje mo\u017enost \u00faniku osobn\u00edch kreditn\u00edch informac\u00ed\">Pokud existuje mo\u017enost \u00faniku osobn\u00edch kreditn\u00edch informac\u00ed<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/information-leak-crisis-management\/#Pokud_je_rozsah_nebo_dopad_velky_nebo_pokud_je_obtizne_individualne_informovat_vsechny_zucastnene_strany\" title=\"Pokud je rozsah nebo dopad velk\u00fd, nebo pokud je obt\u00ed\u017en\u00e9 individu\u00e1ln\u011b informovat v\u0161echny z\u00fa\u010dastn\u011bn\u00e9 strany\">Pokud je rozsah nebo dopad velk\u00fd, nebo pokud je obt\u00ed\u017en\u00e9 individu\u00e1ln\u011b informovat v\u0161echny z\u00fa\u010dastn\u011bn\u00e9 strany<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/information-leak-crisis-management\/#Druhe_oznameni_tiskove_zpravy\" title=\"Druh\u00e9 ozn\u00e1men\u00ed tiskov\u00e9 zpr\u00e1vy\">Druh\u00e9 ozn\u00e1men\u00ed tiskov\u00e9 zpr\u00e1vy<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/information-leak-crisis-management\/#Ridici_centrum_pro_krizovou_situaci\" title=\"\u0158\u00edd\u00edc\u00ed centrum pro krizovou situaci\">\u0158\u00edd\u00edc\u00ed centrum pro krizovou situaci<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/information-leak-crisis-management\/#Shrnuti\" title=\"Shrnut\u00ed\">Shrnut\u00ed<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/information-leak-crisis-management\/#Predstaveni_opatreni_nasi_kancelare\" title=\"P\u0159edstaven\u00ed opat\u0159en\u00ed na\u0161\u00ed kancel\u00e1\u0159e\">P\u0159edstaven\u00ed opat\u0159en\u00ed na\u0161\u00ed kancel\u00e1\u0159e<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Prehled_o_uniku_informaci\"><\/span>P\u0159ehled o \u00faniku informac\u00ed<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Hlavn\u00ed obsah neopr\u00e1vn\u011bn\u00e9ho p\u0159\u00edstupu a n\u00e1sledn\u00e9ho \u00faniku informac\u00ed, ke kter\u00e9mu do\u0161lo ve spole\u010dnosti T\u014dken Corporation, je n\u00e1sleduj\u00edc\u00ed:<\/p>\n\n\n\n<ul>\n<li>Do\u0161lo k tomu: b\u011bhem 24 dn\u016f od 20. srpna do 12. z\u00e1\u0159\u00ed 2020<\/li>\n\n\n\n<li>Odhaleno: 20. \u0159\u00edjna 2020<\/li>\n\n\n\n<li>P\u0159\u00ed\u010dina: P\u0159\u00ed\u010dinou byl neopr\u00e1vn\u011bn\u00fd p\u0159\u00edstup t\u0159et\u00ed strany k serveru, kter\u00fd uchov\u00e1val informace r\u016fzn\u00fdch u\u017eivatel\u016f ze str\u00e1nky skupiny<\/li>\n\n\n\n<li>C\u00edl: Osoby, kter\u00e9 se obr\u00e1tily na str\u00e1nky skupinov\u00fdch spole\u010dnost\u00ed, \u010dlenov\u00e9, uchaze\u010di o r\u016fzn\u00e9 kampan\u011b<\/li>\n\n\n\n<li>Informace: &#8220;E-mailov\u00e1 adresa&#8221;, &#8220;jm\u00e9no&#8221;, &#8220;adresa&#8221;, &#8220;telefonn\u00ed \u010d\u00edslo&#8221;, &#8220;heslo&#8221;, &#8220;pohlav\u00ed&#8221;, &#8220;datum narozen\u00ed&#8221; atd.<\/li>\n\n\n\n<li>Po\u010det p\u0159\u00edpad\u016f: Existuje mo\u017enost \u00faniku informac\u00ed v 657 096 p\u0159\u00edpadech osobn\u00edch \u00fadaj\u016f<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Odhaleni_neopravneneho_pristupu_a_prvotni_reakce\"><\/span>Odhalen\u00ed neopr\u00e1vn\u011bn\u00e9ho p\u0159\u00edstupu a prvotn\u00ed reakce<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Dne 20. \u0159\u00edjna 2020 (Gregori\u00e1nsk\u00fd kalend\u00e1\u0159) spole\u010dnost Touken Corporation p\u0159i pravideln\u00e9 kontrole sv\u00e9 webov\u00e9 str\u00e1nky objevila neopr\u00e1vn\u011bn\u00fd p\u0159\u00edstup na sv\u016fj provozovan\u00fd web &#8216;Nasuraku Kitchen&#8217; a podnikla n\u00e1sleduj\u00edc\u00ed prvotn\u00ed kroky.<\/p>\n\n\n\n<ul>\n<li>Jako nal\u00e9havou bezpe\u010dnostn\u00ed opat\u0159en\u00ed uzav\u0159ela &#8216;Nasuraku Kitchen&#8217; a zastavila ve\u0161ker\u00e9 slu\u017eby poskytovan\u00e9 z tohoto webu.<\/li>\n\n\n\n<li>Z\u0159\u00eddila &#8216;Informa\u010dn\u00ed bezpe\u010dnostn\u00ed \u0161t\u00e1b&#8217; a konzultovala se s extern\u00ed t\u0159et\u00ed stranou.<\/li>\n\n\n\n<li>Do 11. listopadu provedla pr\u016fzkum cel\u00e9ho webov\u00e9ho m\u00edsta skupiny, provedla do\u010dasn\u00e9 opravy zranitelnost\u00ed a ur\u010dila maxim\u00e1ln\u00ed po\u010det a polo\u017eky \u00fanik\u016f.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Klicove_body_prvotni_reakce\"><\/span>Kl\u00ed\u010dov\u00e9 body prvotn\u00ed reakce<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Pokud je potvrzeno riziko \u00faniku informac\u00ed v d\u016fsledku neopr\u00e1vn\u011bn\u00e9ho p\u0159\u00edstupu, je t\u0159eba okam\u017eit\u011b prov\u00e9st n\u00e1sleduj\u00edc\u00ed opat\u0159en\u00ed, aby se zabr\u00e1nilo roz\u0161\u00ed\u0159en\u00ed \u0161kody, vzniku sekund\u00e1rn\u00ed \u0161kody a opakov\u00e1n\u00ed.<\/p>\n\n\n\n<ul>\n<li>Ov\u011b\u0159en\u00ed skute\u010dnost\u00ed (p\u0159\u00ed\u010diny neopr\u00e1vn\u011bn\u00e9ho p\u0159\u00edstupu, cesty atd.)<\/li>\n\n\n\n<li>Zastaven\u00ed za\u0159\u00edzen\u00ed nebo webu, kter\u00e9 bylo napadeno<\/li>\n\n\n\n<li>Odpojen\u00ed napaden\u00e9ho za\u0159\u00edzen\u00ed nebo webu od s\u00edt\u011b<\/li>\n<\/ul>\n\n\n\n<p>Je t\u0159eba db\u00e1t na to, aby se p\u0159i tomto procesu neprov\u00e1d\u011bly neopatrn\u00e9 operace a aby se neodstra\u0148ovaly d\u016fkazy na syst\u00e9mu, ale aby se p\u0159ijaly opat\u0159en\u00ed k zachov\u00e1n\u00ed d\u016fkaz\u016f.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/monolith.law\/wp-content\/uploads\/2021\/08\/Information-leak-crisis-management-2.jpg\" alt=\"\" class=\"wp-image-36554\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Tiskova_zprava_po_odhaleni_uniku_informaci\"><\/span>Tiskov\u00e1 zpr\u00e1va po odhalen\u00ed \u00faniku informac\u00ed<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Prvn\u00ed ozn\u00e1men\u00ed bylo u\u010din\u011bno 17. listopadu 2020 na webov\u00fdch str\u00e1nk\u00e1ch spole\u010dnosti T\u014dken Corporation.<\/p>\n\n\n\n<p>Ozn\u00e1men\u00ed obsahovalo podrobn\u00e9 informace, kter\u00e9 byly po\u017eadov\u00e1ny ve form\u011b &#8220;Ot\u00e1zky a odpov\u011bdi t\u00fdkaj\u00edc\u00ed se incidentu s \u00fanikem informac\u00ed zp\u016fsoben\u00fdm neopr\u00e1vn\u011bn\u00fdm p\u0159\u00edstupem&#8221;, krom\u011b obecn\u00e9ho p\u0159ehledu neopr\u00e1vn\u011bn\u00e9ho p\u0159\u00edstupu a budouc\u00edch opat\u0159en\u00ed.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote\">\n<p>Spole\u010dnost T\u014dken Corporation a na\u0161e skupina spole\u010dnost\u00ed (d\u00e1le jen &#8220;na\u0161e skupina&#8221;) potvrdila 20. \u0159\u00edjna 2020, \u017ee do na\u0161\u00ed s\u00edt\u011b skupiny do\u0161lo k neopr\u00e1vn\u011bn\u00e9mu p\u0159\u00edstupu ze strany t\u0159et\u00edch stran a \u017ee osobn\u00ed \u00fadaje, jako jsou dotazy na HomeMate, kter\u00fd provozuje na\u0161e skupina, informace o \u010dlenech skupinov\u00fdch spole\u010dnost\u00ed a informace o uchaze\u010d\u00edch o r\u016fzn\u00e9 kampan\u011b, mohly uniknout ven.<\/p>\n<\/blockquote>\n\n\n\n<p><a href=\"http:\/\/web.archive.org\/web\/20201117041922\/https:\/www.token.co.jp\/corp\/information\/about_unauthorized\/\" target=\"_blank\" rel=\"noreferrer noopener\">O \u00faniku osobn\u00edch \u00fadaj\u016f zp\u016fsoben\u00e9m neopr\u00e1vn\u011bn\u00fdm p\u0159\u00edstupem[ja]<\/a><\/p>\n\n\n\n<p>Na v\u00fd\u0161e uveden\u00e9 webov\u00e9 str\u00e1nce je odkaz na <a href=\"http:\/\/web.archive.org\/web\/20201117120104\/https:\/www.token.co.jp\/corp\/information\/about_unauthorized\/pdf\/bs2_related_inquiry_list.pdf#zoom=100\" target=\"_blank\" rel=\"noreferrer noopener\">&#8220;Ot\u00e1zky a odpov\u011bdi t\u00fdkaj\u00edc\u00ed se incidentu s \u00fanikem informac\u00ed zp\u016fsoben\u00fdm neopr\u00e1vn\u011bn\u00fdm p\u0159\u00edstupem&#8221;[ja]<\/a>, kter\u00fd obsahuje n\u00e1sleduj\u00edc\u00ed informace.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Obsah_uniklych_informaci\"><\/span>Obsah unikl\u00fdch informac\u00ed<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<blockquote class=\"wp-block-quote\">\n<p>Q Jak\u00e9 informace tentokr\u00e1t unikly?<br> A Domn\u00edv\u00e1me se, \u017ee na v\u0161ech str\u00e1nk\u00e1ch, v\u010detn\u011b t\u011bch, kter\u00e9 provozuje na\u0161e skupinov\u00e1 spole\u010dnost, do\u0161lo k \u00faniku &#8216;jm\u00e9na&#8217;, &#8216;adresy&#8217;, &#8216;telefonn\u00edho \u010d\u00edsla&#8217;, &#8216;e-mailov\u00e9 adresy&#8217; a &#8216;hesla&#8217;.<\/p>\n<\/blockquote>\n\n\n\n<blockquote class=\"wp-block-quote\">\n<p>Q Do\u0161lo k \u00faniku informac\u00ed o kreditn\u00edch kart\u00e1ch?<br> A Na str\u00e1nk\u00e1ch, kter\u00e9 provozujeme, v\u010detn\u011b na\u0161\u00ed skupinov\u00e9 spole\u010dnosti, neuchov\u00e1v\u00e1me \u017e\u00e1dn\u00e9 informace, jako jsou \u010d\u00edsla kreditn\u00edch karet nebo osobn\u00ed identifika\u010dn\u00ed \u010d\u00edsla, tak\u017ee nehroz\u00ed \u00fanik.<\/p>\n<\/blockquote>\n\n\n\n<p>P\u0159i vysv\u011btlov\u00e1n\u00ed unikl\u00fdch informac\u00ed je mo\u017en\u00e9 zabr\u00e1nit zbyte\u010dn\u00e9mu strachu a zmatku t\u00edm, \u017ee konkr\u00e9tn\u011b uvedeme \u2460 informace, kter\u00e9 mohou uniknout, a \u2461 informace, kter\u00e9 nehroz\u00ed \u00fanikem.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/monolith.law\/wp-content\/uploads\/2021\/08\/Information-leak-crisis-management-1.jpg\" alt=\"\" class=\"wp-image-36553\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Opatreni_pro_budoucnost\"><\/span>Opat\u0159en\u00ed pro budoucnost<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<blockquote class=\"wp-block-quote\">\n<p>Q Je bezpe\u010dn\u00e9 pokra\u010dovat v pou\u017e\u00edv\u00e1n\u00ed web\u016f spole\u010dnosti T\u014dken a jej\u00edch dce\u0159in\u00fdch spole\u010dnost\u00ed?<br> A Zabezpe\u010den\u00ed v\u0161ech web\u016f, kter\u00e9 provozuje na\u0161e spole\u010dnost v\u010detn\u011b dce\u0159in\u00fdch spole\u010dnost\u00ed, proti podobn\u00fdm neopr\u00e1vn\u011bn\u00fdm p\u0159\u00edstup\u016fm je nyn\u00ed zes\u00edleno a dokon\u010deno.<\/p>\n<\/blockquote>\n\n\n\n<blockquote class=\"wp-block-quote\">\n<p>Q Jak\u00fd druh spr\u00e1vy informac\u00ed pl\u00e1nujete v budoucnosti?<br> A V budoucnosti budeme podle pot\u0159eby podstupovat kontroly t\u0159et\u00edmi stranami a v p\u0159\u00edpad\u011b, \u017ee by byla na na\u0161em webu nalezena jak\u00e1koli zranitelnost, okam\u017eit\u011b ji naprav\u00edme a budeme se sna\u017eit o je\u0161t\u011b p\u0159\u00edsn\u011bj\u0161\u00ed spr\u00e1vu informac\u00ed.<\/p>\n<\/blockquote>\n\n\n\n<p>V budouc\u00edch opat\u0159en\u00edch je d\u016fle\u017eit\u00e9 pe\u010dliv\u011b vysv\u011btlit u\u017eivatel\u016fm zabezpe\u010den\u00ed web\u016f, kter\u00e9 pou\u017e\u00edvali, zda je mo\u017en\u00e9 je znovu pou\u017e\u00edt, a jak\u00fd bude syst\u00e9m spr\u00e1vy informac\u00ed v budoucnosti.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Otazky_a_odpovedi_tykajici_se_nahrady_skody\"><\/span>Ot\u00e1zky a odpov\u011bdi t\u00fdkaj\u00edc\u00ed se n\u00e1hrady \u0161kody<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<blockquote class=\"wp-block-quote\">\n<p>Q: Budou lidem, kte\u0159\u00ed utrp\u011bli \u0161kodu v d\u016fsledku \u00faniku informac\u00ed, vyplaceny omluvn\u00e9 pen\u00edze nebo n\u00e1hrada za nep\u0159\u00edjemnosti?<br> A: Na z\u00e1klad\u011b informac\u00ed, kter\u00e9 unikly v d\u016fsledku tohoto neopr\u00e1vn\u011bn\u00e9ho p\u0159\u00edstupu, nepl\u00e1nujeme vypl\u00e1cet omluvn\u00e9 pen\u00edze nebo n\u00e1hradu za nep\u0159\u00edjemnosti. Pokud v\u0161ak v d\u016fsledku tohoto \u00faniku informac\u00ed do\u0161lo k finan\u010dn\u00ed \u0161kod\u011b na stran\u011b z\u00e1kazn\u00edka a jsou k dispozici konkr\u00e9tn\u00ed d\u016fkazy, obra\u0165te se pros\u00edm na na\u0161e &#8220;Poradensk\u00e9 centrum pro osobn\u00ed \u00fadaje&#8221;.<\/p>\n<\/blockquote>\n\n\n\n<blockquote class=\"wp-block-quote\">\n<p>Q: Do\u0161lo k v\u00fdb\u011bru pen\u011bz, o kter\u00e9m nev\u00edm. Mohu dostat n\u00e1hradu?<br> A: Pokud do\u0161lo k v\u00fdb\u011bru pen\u011bz z \u00fa\u010dtu, kter\u00fd vlastn\u00edte, a nev\u00edte o tom, po\u017e\u00e1d\u00e1me v\u00e1s, abyste se p\u0159\u00edmo obr\u00e1tili na spole\u010dnost, kter\u00e1 provedla v\u00fdb\u011br. Pokud se uk\u00e1\u017ee, \u017ee nezn\u00e1m\u00fd v\u00fdb\u011br byl zp\u016fsoben t\u00edmto \u00fanikem informac\u00ed, omlouv\u00e1me se za nep\u0159\u00edjemnosti a po\u017e\u00e1d\u00e1me v\u00e1s, abyste n\u00e1s informovali prost\u0159ednictv\u00edm na\u0161eho &#8220;Poradensk\u00e9ho centra pro osobn\u00ed \u00fadaje&#8221;.<\/p>\n<\/blockquote>\n\n\n\n<p>Na\u0161e politika je jasn\u00e1: neplat\u00edme omluvn\u00e9 pen\u00edze ani n\u00e1hradu za nep\u0159\u00edjemnosti, ale pokud dojde k finan\u010dn\u00ed \u0161kod\u011b v d\u016fsledku \u00faniku informac\u00ed, jsme p\u0159ipraveni jednat o n\u00e1hrad\u011b \u0161kody individu\u00e1ln\u011b.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/monolith.law\/wp-content\/uploads\/2021\/08\/c6ffb54c82db6b5f3fe161f7f5ec9b60.jpg\" alt=\"\" class=\"wp-image-35961\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Nacasovani_prvni_tiskove_zpravy_zanechava_otazky\"><\/span>Na\u010dasov\u00e1n\u00ed prvn\u00ed tiskov\u00e9 zpr\u00e1vy zanech\u00e1v\u00e1 ot\u00e1zky<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Jako sou\u010d\u00e1st krizov\u00e9ho \u0159\u00edzen\u00ed spole\u010dnosti je t\u0159eba p\u0159edev\u0161\u00edm zv\u00e1\u017eit &#8220;roz\u0161\u00ed\u0159en\u00ed \u0161kod&#8221;, &#8220;vznik sekund\u00e1rn\u00edch \u0161kod&#8221; a &#8220;prevenci opakov\u00e1n\u00ed&#8221;.<\/p>\n\n\n\n<p>Proto je d\u016fle\u017eit\u00e9, aby v p\u0159\u00edpad\u011b odhalen\u00ed \u00faniku informac\u00ed byla provedena prvotn\u00ed reakce a co nejd\u0159\u00edve byli informov\u00e1ni v\u0161ichni z\u00fa\u010dastn\u011bn\u00ed.<\/p>\n\n\n\n<p>Q&amp;A spole\u010dnosti T\u014dken Corporation pe\u010dliv\u011b odpov\u00edd\u00e1 na \u0161irokou \u0161k\u00e1lu p\u0159edpokl\u00e1dan\u00fdch ot\u00e1zek, co\u017e nazna\u010duje, \u017ee bylo pe\u010dliv\u011b p\u0159ipraveno v p\u0159edstihu s odborn\u00edky, jako jsou pr\u00e1vn\u00edci. Nicm\u00e9n\u011b, zve\u0159ejn\u011bn\u00ed neopr\u00e1vn\u011bn\u00e9ho p\u0159\u00edstupu t\u00e9m\u011b\u0159 m\u011bs\u00edc po jeho odhalen\u00ed zanech\u00e1v\u00e1 ot\u00e1zky.<\/p>\n\n\n\n<p>Samoz\u0159ejm\u011b, spole\u010dnosti by cht\u011bly prov\u00e9st vy\u0161et\u0159en\u00ed a opat\u0159en\u00ed p\u0159ed zve\u0159ejn\u011bn\u00edm, ale nem\u011bly by n\u00e1sleduj\u00edc\u00ed \u010dty\u0159i body zve\u0159ejnit d\u0159\u00edve jako prvn\u00ed zpr\u00e1vu?<\/p>\n\n\n\n<ul>\n<li>Odhalen\u00ed \u00faniku informac\u00ed a p\u0159edpokl\u00e1dan\u00ed dot\u010den\u00ed jedinci<\/li>\n\n\n\n<li>Obsah unikl\u00fdch osobn\u00edch \u00fadaj\u016f<\/li>\n\n\n\n<li>\u017d\u00e1dn\u00e1 mo\u017enost \u00faniku kreditn\u00edch informac\u00ed, jako jsou \u010d\u00edsla karet<\/li>\n\n\n\n<li>Budouc\u00ed struktura a pl\u00e1n<\/li>\n\n\n\n<li>Kontaktn\u00ed m\u00edsto pro dotazy<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Klicove_body_oznameni_hlaseni_a_zverejneni\"><\/span>Kl\u00ed\u010dov\u00e9 body ozn\u00e1men\u00ed, hl\u00e1\u0161en\u00ed a zve\u0159ejn\u011bn\u00ed<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>P\u0159i \u00faniku informac\u00ed je t\u0159eba zv\u00e1\u017eit ozn\u00e1men\u00ed u\u017eivatel\u016fm a obchodn\u00edm partner\u016fm, pod\u00e1n\u00ed zpr\u00e1v dozorov\u00fdm org\u00e1n\u016fm a policii, a zve\u0159ejn\u011bn\u00ed na webov\u00fdch str\u00e1nk\u00e1ch nebo v m\u00e9di\u00edch, v z\u00e1vislosti na p\u0159\u00ed\u010din\u011b a obsahu informac\u00ed.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"V_pripade_trestne_cinnosti\"><\/span>V p\u0159\u00edpad\u011b trestn\u00e9 \u010dinnosti<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Pokud existuje mo\u017enost trestn\u00e9 \u010dinnosti v souvislosti s neopr\u00e1vn\u011bn\u00fdm p\u0159\u00edstupem, je nutn\u00e9 po proveden\u00ed vy\u0161et\u0159ov\u00e1n\u00ed a opat\u0159en\u00ed pro zachov\u00e1n\u00ed d\u016fkaz\u016f co nejd\u0159\u00edve podat zpr\u00e1vu policii.<\/p>\n\n\n\n<p>V p\u0159\u00edpad\u011b spole\u010dnosti T\u014dken Corporation (Japonsk\u00e1 stavebn\u00ed spole\u010dnost T\u014dken Corporation) bylo ozn\u00e1men\u00ed o \u0161kod\u011b pod\u00e1no ministerstvu zem\u011bd\u011blstv\u00ed, lesnictv\u00ed a rybolovu a prefektur\u00e1ln\u00ed policejn\u00ed stanici Aichi den po dokon\u010den\u00ed vy\u0161et\u0159ov\u00e1n\u00ed webov\u00fdch str\u00e1nek cel\u00e9 skupiny.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Pokud_existuje_moznost_uniku_osobnich_kreditnich_informaci\"><\/span>Pokud existuje mo\u017enost \u00faniku osobn\u00edch kreditn\u00edch informac\u00ed<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Pokud existuje mo\u017enost \u00faniku informac\u00ed, jako je My Number (Japonsk\u00fd syst\u00e9m soci\u00e1ln\u00edho zabezpe\u010den\u00ed My Number), \u010d\u00edslo kreditn\u00ed karty, bankovn\u00ed \u00fa\u010det, ID a heslo, je nutn\u00e9 co nejd\u0159\u00edve informovat doty\u010dnou osobu a vyzvat ji k zastaven\u00ed t\u011bchto \u010dinnost\u00ed, aby se zabr\u00e1nilo sekund\u00e1rn\u00ed \u0161kod\u011b.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Pokud_je_rozsah_nebo_dopad_velky_nebo_pokud_je_obtizne_individualne_informovat_vsechny_zucastnene_strany\"><\/span>Pokud je rozsah nebo dopad velk\u00fd, nebo pokud je obt\u00ed\u017en\u00e9 individu\u00e1ln\u011b informovat v\u0161echny z\u00fa\u010dastn\u011bn\u00e9 strany<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Informace budou zve\u0159ejn\u011bny na webov\u00fdch str\u00e1nk\u00e1ch nebo prost\u0159ednictv\u00edm tiskov\u00fdch konferenc\u00ed. Nicm\u00e9n\u011b, pokud by zve\u0159ejn\u011bn\u00ed mohlo v\u00e9st k roz\u0161\u00ed\u0159en\u00ed \u0161kody, je t\u0159eba zv\u00e1\u017eit na\u010dasov\u00e1n\u00ed a c\u00edlovou skupinu zve\u0159ejn\u011bn\u00ed.<\/p>\n\n\n\n<p>P\u0159i zve\u0159ej\u0148ov\u00e1n\u00ed je tak\u00e9 d\u016fle\u017eit\u00e9 zajistit transparentnost a co nejv\u00edce zve\u0159ejnit skute\u010dnosti, co\u017e p\u0159isp\u00edv\u00e1 k d\u016fv\u011b\u0159e v podnik a tak\u00e9 pom\u00e1h\u00e1 p\u0159edch\u00e1zet roz\u0161\u00ed\u0159en\u00ed \u0161kody a podobn\u00fdm incident\u016fm.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/monolith.law\/wp-content\/uploads\/2021\/08\/f5998b2ea88a59c00a098bca4bb90a2e.jpg\" alt=\"\" class=\"wp-image-35963\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Druhe_oznameni_tiskove_zpravy\"><\/span>Druh\u00e9 ozn\u00e1men\u00ed tiskov\u00e9 zpr\u00e1vy<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Dne 9. \u00fanora 2021, po za\u010d\u00e1tku nov\u00e9ho roku, spole\u010dnost T\u014dken Corporation zve\u0159ejnila na sv\u00e9 webov\u00e9 str\u00e1nce druhou zpr\u00e1vu o \u00faniku osobn\u00edch \u00fadaj\u016f a provedla opravy v po\u010dtu a polo\u017ek\u00e1ch \u00faniku.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote\">\n<p>V\u00fdsledkem forenzn\u00edho vy\u0161et\u0159en\u00ed proveden\u00e9ho t\u0159et\u00ed stranou a op\u011btovn\u00e9ho zkoum\u00e1n\u00ed polo\u017eek \u00faniku byly zji\u0161t\u011bny n\u011bkter\u00e9 rozd\u00edly. Proto v\u00e1s \u017e\u00e1d\u00e1me, abyste si je znovu prohl\u00e9dli v p\u0159\u00edloze 1 &#8220;Polo\u017eky pro ka\u017edou str\u00e1nku a slu\u017ebu&#8221;. (vynech\u00e1no) Po\u010det \u00fanik\u016f se tak\u00e9 zm\u011bnil od maxim\u00e1ln\u011b 657 096 na maxim\u00e1ln\u011b 655 488.<\/p>\n<\/blockquote>\n\n\n\n<p>Obsah byl krom\u011b v\u00fd\u0161e uveden\u00fdch oprav dopln\u011bn pouze o metody \u0159e\u0161en\u00ed nevy\u017e\u00e1dan\u00fdch a podez\u0159el\u00fdch e-mail\u016f, z\u00e1kladn\u00ed obsah z\u016fstal t\u00e9m\u011b\u0159 stejn\u00fd jako v prvn\u00ed tiskov\u00e9 zpr\u00e1v\u011b a toto ozn\u00e1men\u00ed bylo posledn\u00ed.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Ridici_centrum_pro_krizovou_situaci\"><\/span>\u0158\u00edd\u00edc\u00ed centrum pro krizovou situaci<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Spole\u010dnost T\u014dken Corporation z\u0159\u00eddila po odhalen\u00ed neopr\u00e1vn\u011bn\u00e9ho p\u0159\u00edstupu &#8220;Informa\u010dn\u00ed bezpe\u010dnostn\u00ed \u00fast\u0159ed\u00ed&#8221; a v \u00fasil\u00ed o zabr\u00e1n\u011bn\u00ed opakov\u00e1n\u00ed incidentu spolupracuje s extern\u00edmi t\u0159et\u00edmi stranami a polici\u00ed.<\/p>\n\n\n\n<p>Sestava t\u00e9to organizace nen\u00ed jasn\u00e1, ale krom\u011b opat\u0159en\u00ed pro zabezpe\u010den\u00ed syst\u00e9mu je t\u0159eba sou\u010dasn\u011b prov\u00e1d\u011bt tak\u00e9 komunikaci s c\u00edlov\u00fdmi u\u017eivateli, reagovat na m\u00e9dia, komunikovat s akcion\u00e1\u0159i a zva\u017eovat pr\u00e1vn\u00ed odpov\u011bdnost. Obecn\u011b je tedy nutn\u00e1 \u00fa\u010dast n\u00e1sleduj\u00edc\u00edch extern\u00edch t\u0159et\u00edch stran a odborn\u00edk\u016f:<\/p>\n\n\n\n<ul>\n<li>Velk\u00e9 softwarov\u00e9 spole\u010dnosti<\/li>\n\n\n\n<li>Velk\u00e9 specializovan\u00e9 bezpe\u010dnostn\u00ed firmy<\/li>\n\n\n\n<li>Extern\u00ed pr\u00e1vn\u00edci s hlubok\u00fdmi znalostmi v oblasti kybernetick\u00e9 bezpe\u010dnosti<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Shrnuti\"><\/span>Shrnut\u00ed<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>V p\u0159\u00edpad\u011b, jako je tento, kdy do\u0161lo k \u00faniku velk\u00e9ho mno\u017estv\u00ed osobn\u00edch \u00fadaj\u016f p\u0159esahuj\u00edc\u00edch 650 000 z\u00e1znam\u016f, je d\u016fle\u017eit\u00e1 &#8220;prvotn\u00ed reakce&#8221; a &#8220;ozn\u00e1men\u00ed, hl\u00e1\u0161en\u00ed a zve\u0159ejn\u011bn\u00ed&#8221; zam\u011b\u0159en\u00e9 na krizov\u00fd \u0161t\u00e1b, stejn\u011b jako &#8220;bezpe\u010dnostn\u00ed opat\u0159en\u00ed&#8221;.<\/p>\n\n\n\n<p>Obzvl\u00e1\u0161t\u011b rychl\u00e1 reakce je vy\u017eadov\u00e1na nejen v prvotn\u00ed reakci, ale tak\u00e9 v ozn\u00e1men\u00ed a hl\u00e1\u0161en\u00ed policii a p\u0159\u00edslu\u0161n\u00fdm ministerstv\u016fm, stejn\u011b jako v zve\u0159ejn\u011bn\u00ed (tiskov\u00e9 zpr\u00e1vy) pro z\u00fa\u010dastn\u011bn\u00e9 strany.<\/p>\n\n\n\n<p>Av\u0161ak, pokud se nespr\u00e1vn\u011b vypo\u0159\u00e1d\u00e1te s touto situac\u00ed, m\u016f\u017eete b\u00fdt konfrontov\u00e1ni s mo\u017enost\u00ed odpov\u011bdnosti za n\u00e1hradu \u0161kody, proto doporu\u010dujeme konzultovat s pr\u00e1vn\u00edkem s bohat\u00fdmi znalostmi a zku\u0161enostmi v oblasti kybernetick\u00e9 bezpe\u010dnosti, m\u00edsto abyste se rozhodovali sami.<\/p>\n\n\n\n<p>Pokud m\u00e1te z\u00e1jem o krizov\u00e9 \u0159\u00edzen\u00ed p\u0159i \u00faniku informac\u00ed zp\u016fsoben\u00e9m malwarem spole\u010dnosti Capcom, pod\u00edvejte se na n\u00e1\u0161 \u010dl\u00e1nek, kde je toto t\u00e9ma podrobn\u011b pops\u00e1no.<\/p>\n\n\n\n<p><a href=\"https:\/\/monolith.law\/corporate\/capcom-information-leakage-crisis-management\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/monolith.law\/corporate\/capcom-information-leakage-crisis-management[ja]<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Predstaveni_opatreni_nasi_kancelare\"><\/span>P\u0159edstaven\u00ed opat\u0159en\u00ed na\u0161\u00ed kancel\u00e1\u0159e<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Pr\u00e1vn\u00ed kancel\u00e1\u0159 Monolis je pr\u00e1vn\u00ed kancel\u00e1\u0159\u00ed s vysokou odbornost\u00ed v oblasti IT, zejm\u00e9na internetu a pr\u00e1va. Na\u0161e kancel\u00e1\u0159 se zab\u00fdv\u00e1 tvorbou a reviz\u00ed smluv pro r\u016fzn\u00e9 p\u0159\u00edpady, od spole\u010dnost\u00ed k\u00f3tovan\u00fdch na Tokyo Stock Exchange Prime a\u017e po startupy. Pokud m\u00e1te n\u011bjak\u00e9 pot\u00ed\u017ee, pros\u00edm, pod\u00edvejte se na n\u00e1sleduj\u00edc\u00ed \u010dl\u00e1nek.<\/p>\n\n\n\n<p><a href=\"https:\/\/monolith.law\/contractcreation\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/monolith.law\/contractcreation[ja]<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Dne 1. dubna 2005 (v roce 2005 podle gregori\u00e1nsk\u00e9ho kalend\u00e1\u0159e) byl pln\u011b zaveden Japonsk\u00fd z\u00e1kon o ochran\u011b osobn\u00edch \u00fadaj\u016f, a podnikatel\u00e9, kte\u0159\u00ed zach\u00e1zej\u00ed s osobn\u00edmi \u00fadaji, jsou povinni p\u0159ijmout opat\u0159en\u00ed [&hellip;]<\/p>\n","protected":false},"author":32,"featured_media":63952,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[24,29],"acf":[],"_links":{"self":[{"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/posts\/61516"}],"collection":[{"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/users\/32"}],"replies":[{"embeddable":true,"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/comments?post=61516"}],"version-history":[{"count":2,"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/posts\/61516\/revisions"}],"predecessor-version":[{"id":63953,"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/posts\/61516\/revisions\/63953"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/media\/63952"}],"wp:attachment":[{"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/media?parent=61516"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/categories?post=61516"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/tags?post=61516"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}