Bellpark: ransomware encrypted a cloud system for shop leases, and data on 1,115 landlords, including bank accounts, may have leaked

1. 2020-08-26

   The in-house cloud system for shop leases failed, and the developer was asked to restore it. [1]

2. 2020-09-09

   The developer reported that the data was encrypted. A message hinting at a ransom demand was left, so the company judged it ransomware and went to the police. [1]

3. 2020-09-24

   An outside firm began investigating the server that held the data. [2]

4. 2020-10-21

   The investigation ended. It found no sign of data theft but traces of repeated unauthorized access, and the company judged that theft could not be ruled out. It gave the results to the police. [2]

Data on 263 individual and 839 corporate landlords may have leaked: names, addresses, phone numbers, contact persons, email addresses, bank accounts for rent, property names and rents. The ransom note was still being examined, and it was not known whether it threatened to publish data. Customer data is in a separate system and was not affected. [1]

The company said a server security setting had been at fault. Landlords were to be informed by letter from early October. [1]

The October 22 follow-up said the data that may have leaked covers 291 individual and 824 corporate lessors: names, addresses, phone numbers, contact persons, their mail addresses, bank accounts and lease terms. The affected system and server were retired. [2]