Kawamura Electric: the parent and four subsidiaries were hit by ransomware and internal systems stopped

1. 2022-04-19

   It reported the damage to and consulted the cybercrime division of the Aichi prefectural police. [3]

2. 2022-04-27

   It published a second report. Ransomware stopped all internal systems; mail was restored. No leak was confirmed. [1] [2]

3. 2022-06-06

   Once the recurrence prevention measures were in place, it gave up restoring the encrypted employee data. As this counts as damage to personal data, it reported to the Personal Information Protection Commission. [3] [4]

4. 2022-07-11

   It announced, in a notice to former employees, that employee data had been encrypted and could not be restored. [3] [4]

The ransomware "CryptXXX", which exploited a vulnerability in an SSL-VPN, encrypted the names, birth dates, genders, addresses and phone numbers of employees, former ones included, of the parent and four subsidiaries, and they could not be restored. Reporting put it at about 8,000 to 9,000 people. No leak of the data was confirmed. My Number data was not damaged. [3] [4]