Two japanese firms experience recently disclosed ransomware incidents. Sports guild NAS, a Daiwa house group subsidiary, issued the following statement (machine translated): apology and account of unauthorized access to our server. membership management operated in some of our stores (9 stores in total) on April 2, 2021 due to unauthorized access to our server (hereinafter referred to as the “Server”) from outside. a system failure (hereinafter referred to as the “System”) has occurred. We deeply excuse for any inconvenience and care caused to you. We also apologize for the delay in reporting due to the time required to moot system recovery, inquire data leaks, and extract and analyze personal info stored on the server. According to a survey conducted by a research firm, the ransomware infected with the server this time is not the typecast that steals information, and as of may 18, 2021, the research firm has asked customers, etc. We have received reports that we have been unable to confirm the fact that the info is posted on an external site. For the time being, we will keep to inquire whether or not the customer info is disclosed on external sites with the cooperation of an external research company. To date, no secondary damage has been confirmed due to the utilize of customer information, but we have established a call heart to collect information such as inquiries on this matter. If you make suspicious emails or phone calls, please let us cognize at the terminate of the inquiry. If it is confirmed that customer information, etc. has been leaked by hereafter inquiries, etc., we will report it again. Inquiries from many people are expected to be concentrated. Depending on the content of frequently asked questions and inquiries, we may respond in composition (including email) or by posting on our website. Thank you for your understanding. The residue of their posting provides specific details about the info on the server and why they manage not believe that data was exfiltrated. in terms of the number of people impacted, they account the following number of individuals with information on the server penis information: 150,084 people (34,920 multitude including credit card information) — Name, address, date of birth, gender, phone number, member number, email address, emergency contact information , credit card information, account information, one or more of work (name, address, phone number) Employee information: 460 people — name, engagement of nascency For the full statement and details, consider their web site. in other intelligence from Japan, Ito Yogyo Co., Ltd, which manufactures concrete for roads, also issued a statement disclosing a ransomware attack (machine translation follows): The facts and recovery status found so far are as follows: Early in the morning of June 10, 2021, we confirmed that our server had unauthorized access that appeared to be ransomware. Immediately after that, to preclude the damage from spreading, we stopped the server and personal computers that could have an impact and shut down the network. On the same day, after the restoration work, the server and personal computer were resumed and confirmed to be safe, and the locked network started communication. In add-on to informing the police and other related ministries and agencies, we are proceeding with the response in cooperation with related organizations. At this time, we have not confirmed the leakage of information stored on this server or the fact that it has been illegally disclosed. In the future, if new facts are clarified to be announced, we will inform you again on the home page, etc. In lightness of this situation, we will act to further strengthen our information management system to prevent a recurrence. We sincerely apologize for any inconvenience and concern caused to all parties concerned. If you get any questions or queries regarding this matter, please contact the following: (Inquiry cast https://itoyogyo.co.jp/contact/ ) Neither victim corporation identified the typecast of ransomware used, and Sports guild NAS specifically noted that they did not receive any ransom demand. Datahacks.net did not find data from either firm on any of the usual dedicated leak sites or forums where data tends to be traded or sold.
