OYO Corporation: some servers of its Land Information Report service were attacked with ransomware, partly halting the service
A customer reported on September 30 that the service was unusable; the servers were stopped and the cause was found to be a ransomware attack.
Disclosed
2021-10-07
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
A customer reported that the service could not be used. The related servers were stopped and the cause investigated, and it turned out to be a ransomware attack. [1]
It announced the case. [1]
It published a follow-up and said the cause was unauthorized access through a port that had not been closed. [2]
Cause
The cause was unauthorized access through a port that had not been closed. [2]
Timeline
- Started, Detected 2021-09-30
- Disclosed 2021-10-07
- 7 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Service outage]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Moderate]Tokyo, ChiyodaAccommodation, food and drink
OYO Corporation
Sources
- [1][News]応用地質「土地情報レポートサービス」使用サーバにランサムウェア攻撃、サービスが一部停止にScanNetSecurity · 2021-10-11 08:05
- [2][News]応用地質「土地情報レポートサービス」サーバへのランサムウェア攻撃、原因は閉じていなかったポートへの不正アクセスScanNetSecurity · 2021-11-22 08:05