> JapanHacked_
[Resolved][Severity: Major][Ransomware]

Nippon Express: servers and PCs of its Singapore subsidiary were accessed without authorization, and information may have leaked

The final report confirmed that ransomware gave access to some customer business information. No publication or abuse was found.

Disclosed

2021-12-09

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It confirmed unauthorized access from outside to some servers and PCs of the Singapore subsidiary. [1]

  2. It announced the case. [1]

  3. It published the final report of the investigation. [2]

Impact

It disconnected the accessed devices from the network and finished its initial steps to prevent the damage from spreading. With an external specialist it is checking whether personal or sensitive information of customers and employees leaked. No leak has been confirmed and no systems in other countries or regions, including Japan, were affected. [1]

The final report confirmed a ransomware attack in which some customer business information was accessed. It found no fact of the information being published or abused, and no impact on business. [2]

Timeline

  1. Detected 2021-11-14
  2. Disclosed 2021-12-09
  3. 25 days

Attack or cause

Method
[Ransomware]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社シンガポール現地法人における IT システムへの不正アクセスによる情報流出の可能性ついてNippon Express Co., Ltd. · 2021-12-09
  2. [2][Official]当社シンガポール現地法人における IT システムへの不正アクセスに関する 調査結果について(最終報)NIPPON EXPRESS HOLDINGS, INC. · 2022-03-30