> JapanHacked_
[Investigating][Severity: Moderate][Intrusion][Ransomware]

Gekkeikan: its server was accessed without authorization and internal systems failed

Ransomware encrypted files and caused internal system failures. A network device vulnerability is the likely route and personal data may have leaked.

Disclosed

2022-04-06

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. A third party accessed a server it manages and operates without authorization, causing a failure in internal systems. [1]

  2. It announced the case. [1]

  3. It published a second report. The attack was ransomware encrypting files, and a vulnerability in a network device is the likely entry route. Personal data may have leaked, though no trace of exfiltration was found. [2]

Impact

Information that may have leaked includes shipping lists (993, 74, 2,061 and 707 entries), 2,153 complaint reports, 2,167 business partner contacts, a recruiting applicant list of about 17,000, shareholder data and data on 2,560 employees. [2]

Timeline

  1. Started, Detected 2022-04-02
  2. Disclosed 2022-04-06
  3. 4 days

Attack or cause

Method
[Intrusion][Ransomware]
Impact
[Service outage][Data leak]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]月桂冠サーバへの不正アクセス、社内システムで障害発生ScanNetSecurity · 2022-04-08 08:05
  2. [2][Official]当社サーバへの不正アクセスに関するお知らせ（第二報）お客様等の個人情報流出可能性のお知らせとお詫びGekkeikan Sake Co., Ltd. · 2022-05-26