> JapanHacked_
[Investigating][Severity: Major][Ransomware]

Komori Corporation: the file server of its US subsidiary was infected with ransomware and data thought to be from the server was published externally

The file server of its US subsidiary was infected with ransomware in February. The company found data that seemed to come from the server published externally.

Disclosed

2021-05-14

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It detected an abnormality on the file server of its US subsidiary and confirmed a ransomware infection. It cut off access to the server and worked on recovery and security measures with a security firm. [1]

  2. It confirmed that information that seemed to come from the attacked server was published externally, reported the damage to local investigators and announced the case. [1]

Impact

The company is investigating the extent of the damage because some data on the server may have leaked. It said Komori Corporation, its domestic subsidiaries and its local companies outside the US run on separate networks and were not affected. [1]

Timeline

  1. Detected 2021-02-08
  2. Disclosed 2021-05-14
  3. 95 days

Attack or cause

Method
[Ransomware]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]米子会社にランサム攻撃、データ流出の可能性 - 小森コーポレーションSecurity NEXT · 2021-05-14