> JapanHacked_
[Resolved][Severity: Moderate][Ransomware]

Ito Yogyo: one server was hit by ransomware, with no impact on business and no information leak confirmed

One server was hit by ransomware after unauthorized access from outside. No leak was confirmed and business was not affected.

Disclosed

2021-06-15

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. In the early morning, it confirmed unauthorized access to its server that appeared to be ransomware. One server was hit. It stopped the server and PCs that might be affected and cut off the network. The same day, after recovery work, it restarted devices and the network confirmed safe. [2] [3]

  2. It announced the case. [1] [3]

  3. The affected server had also been restored, and the company said business was not affected. [2]

Investigation

No publication of the information stored on the server was confirmed. The company reported to the police and the competent ministry and is responding. It did not disclose the cause of the unauthorized access or the state of any extortion by the ransomware. [2] [3]

Timeline

  1. Detected 2021-06-10
  2. Disclosed 2021-06-15
  3. 5 days

Attack or cause

Method
[Ransomware]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社サーバーへの不正アクセスについてIto Yogyo Co., Ltd. · 2021-06-15
  2. [2][News]不正アクセスでサーバがランサム被害 - イトーヨーギョーSecurity NEXT · 2021-06-17
  3. [3][News]イトーヨーギョーのサーバにランサムウェア攻撃、現時点で情報流出は確認されずScanNetSecurity · 2021-06-17 08:00