> JapanHacked_
[Resolved][Severity: Moderate][Ransomware]

Kawasaki City: ransomware hit the school server of Tachibana High School for the second time in half a year

Ransomware encrypted the files on the school server that connects students' learning devices.

Disclosed

2020-05-01

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. A staff member found an English ransom note on the server, and its files were encrypted. [2]

  2. The city disclosed the incident. [1]

Impact

The server held teachers' records of where students were going after graduation. The cause of the infection is unknown. No effect on the city's administrative systems or other schools was found. [2]

Background

The school had been hit by a different ransomware in October 2019, which damaged students' work, and had strengthened its defenses afterwards. [2]

Timeline

  1. Detected 2020-04-22
  2. Disclosed 2020-05-01
  3. 9 days

Attack or cause

Method
[Ransomware]
Impact
[Extortion]
Entry point
Unknown

Data exposed or at risk

[Education]

Organizations involved

Open in organization search

Sources

  1. [1][News]高校のネットワークサーバがランサムウェアに感染、昨年10月も別ウイルスに感染(川崎市)ScanNetSecurity · 2020-05-07 09:00
  2. [2][News]高校でランサム被害、セキュリティ強化するも再発 - 川崎市Security NEXT · 2020-05-08