Bewith: its internal network was hit by ransomware and information on 15,421 applicants and 9,375 employees was encrypted, with no leak confirmed

1. 2021-05-19

   In the evening, trouble accessing the internal network was reported and the IT department began to investigate. Some data in the network was encrypted and a ransom note typical of ransomware was found, so it judged this a ransomware attack. [1]

2. 2021-08-13

   It announced the case and set up a dedicated contact line. It had already consulted the police and reported to the Personal Information Protection Commission and others. [1] [2]

Data on one PC and a server was encrypted. It included names, ages at application, pass or fail decisions and interviewer remarks of 15,421 applicants for part-time jobs since 2013, and names, working hours and pay of 9,375 employees (including those who left since April 2020). It held no My Number or account data, and all applicant data was password-protected. [1]

There was no demand for money from a third party, and the external investigation found no leak outside the company. The network for contact center work it takes on is separate and was not affected. [1]