Komori Corporation: the file server of its US subsidiary was infected with ransomware and data thought to be from the server was published externally
The file server of its US subsidiary was infected with ransomware in February. The company found data that seemed to come from the server published externally.
Disclosed
2021-05-14
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It detected an abnormality on the file server of its US subsidiary and confirmed a ransomware infection. It cut off access to the server and worked on recovery and security measures with a security firm. [1]
It confirmed that information that seemed to come from the attacked server was published externally, reported the damage to local investigators and announced the case. [1]
Impact
The company is investigating the extent of the damage because some data on the server may have leaked. It said Komori Corporation, its domestic subsidiaries and its local companies outside the US run on separate networks and were not affected. [1]
Timeline
- Detected 2021-02-08
- Disclosed 2021-05-14
- 95 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Major]Tokyo, SumidaManufacturing
Komori CorporationIts US subsidiary was hit.
Sources
- [1][News]米子会社にランサム攻撃、データ流出の可能性 - 小森コーポレーションSecurity NEXT · 2021-05-14