Muto: its servers were attacked with ransomware
Servers were accessed without authorization on the morning of August 31 and found to be ransomware. It announced the case the same day and is working on recovery.
Disclosed
2021-08-31
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Investigation result
It detected unauthorized access from outside in the early morning, stopped the affected servers and cut the network. The investigation found that the access most likely came through the VPN device, and that ransomware had run on and encrypted several Windows servers. No leak of customer data, including personal data, has been confirmed. As countermeasures it upgraded the VPN, changed passwords and restricted VPN use. [2]
Timeline
- Started, Detected, Disclosed 2021-08-31
- 1 days
Attack or cause
- Method
- [Ransomware]
- Impact
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Moderate]Aichi, NishioWholesale and retail trade
Muto Co., Ltd.
Sources
- [1][News]創業100年を超えるムトウにランサムウェア攻撃、現在は復旧に取り組むScanNetSecurity · 2021-09-03 08:05
- [2][Official]当社サーバーへの不正アクセスについてMuto Co., Ltd. · 2021-10-29