> JapanHacked_
[Resolved][Severity: Moderate][Ransomware]

Muto: its servers were attacked with ransomware

Servers were accessed without authorization on the morning of August 31 and found to be ransomware. It announced the case the same day and is working on recovery.

Disclosed

2021-08-31

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Servers were accessed without authorization in the morning and it was confirmed as ransomware. It announced the case the same day. [1]

  2. It published the investigation result. [2]

Investigation result

It detected unauthorized access from outside in the early morning, stopped the affected servers and cut the network. The investigation found that the access most likely came through the VPN device, and that ransomware had run on and encrypted several Windows servers. No leak of customer data, including personal data, has been confirmed. As countermeasures it upgraded the VPN, changed passwords and restricted VPN use. [2]

Timeline

  1. Started, Detected, Disclosed 2021-08-31
  2. 1 days

Attack or cause

Method
[Ransomware]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]創業100年を超えるムトウにランサムウェア攻撃、現在は復旧に取り組むScanNetSecurity · 2021-09-03 08:05
  2. [2][Official]当社サーバーへの不正アクセスについてMuto Co., Ltd. · 2021-10-29