> JapanHacked_
[Investigating][Severity: Moderate][Ransomware]

OYO Corporation: some servers of its Land Information Report service were attacked with ransomware, partly halting the service

A customer reported on September 30 that the service was unusable; the servers were stopped and the cause was found to be a ransomware attack.

Disclosed

2021-10-07

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. A customer reported that the service could not be used. The related servers were stopped and the cause investigated, and it turned out to be a ransomware attack. [1]

  2. It announced the case. [1]

  3. It published a follow-up and said the cause was unauthorized access through a port that had not been closed. [2]

Cause

The cause was unauthorized access through a port that had not been closed. [2]

Timeline

  1. Started, Detected 2021-09-30
  2. Disclosed 2021-10-07
  3. 7 days

Attack or cause

Method
[Ransomware]
Impact
[Service outage]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]応用地質「土地情報レポートサービス」使用サーバにランサムウェア攻撃、サービスが一部停止にScanNetSecurity · 2021-10-11 08:05
  2. [2][News]応用地質「土地情報レポートサービス」サーバへのランサムウェア攻撃、原因は閉じていなかったポートへの不正アクセスScanNetSecurity · 2021-11-22 08:05