Nippon Express: servers and PCs of its Singapore subsidiary were accessed without authorization, and information may have leaked
The final report confirmed that ransomware gave access to some customer business information. No publication or abuse was found.
Disclosed
2021-12-09
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It confirmed unauthorized access from outside to some servers and PCs of the Singapore subsidiary. [1]
It announced the case. [1]
It published the final report of the investigation. [2]
Impact
It disconnected the accessed devices from the network and finished its initial steps to prevent the damage from spreading. With an external specialist it is checking whether personal or sensitive information of customers and employees leaked. No leak has been confirmed and no systems in other countries or regions, including Japan, were affected. [1]
The final report confirmed a ransomware attack in which some customer business information was accessed. It found no fact of the information being published or abused, and no impact on business. [2]
Timeline
- Detected 2021-11-14
- Disclosed 2021-12-09
- 25 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Major]Tokyo, ChiyodaTransport and postal services
Nippon Express Co., Ltd.The IT systems of its Singapore subsidiary were affected
Sources
- [1][Official]当社シンガポール現地法人における IT システムへの不正アクセスによる情報流出の可能性ついてNippon Express Co., Ltd. · 2021-12-09
- [2][Official]当社シンガポール現地法人における IT システムへの不正アクセスに関する 調査結果について(最終報)NIPPON EXPRESS HOLDINGS, INC. · 2022-03-30