giip
SES Proposal
Incident response

Major Japanese beauty & cosmetics company — breach response

Verified customer engagement

Environment
A beauty & cosmetics company with roughly ¥180 billion in annual revenue, running hundreds of servers across the web, application and database tiers.
Challenge
The company was breached. It needed to determine how the attacker got in and stop it, and establish the scope of the damage — fast, across logs scattered over many systems.
AI-automated
GIIP security operations was brought in after the incident: AI cross-investigated the original logs (WAF, load balancer, web, database audit, OS), classified the attack and judged whether data was actually accessed, sized the damage, proposed where to block, and executed the approved blocks.
Human review
Administrators reviewed the AI’s findings and approved the high-risk blocking and configuration changes before they were executed.
Result
The intrusion route was identified and blocked, and the scope of the damage was investigated — turning a post-incident scramble into a traceable, evidence-based response.

Services used in this story

Discuss your environmentSee all customer stories