DYNAM JAPAN HOLDINGS: its servers were hit by ransomware, part of the data was encrypted and internal systems failed

1. 2022-09-14

   It announced that some servers were accessed without authorization and internal systems failed. The attack was ransomware, part of the data in the servers was encrypted, and a leak cannot be ruled out. It set up an emergency task force, reported to the police and the authorities concerned, and is investigating with an outside specialist. Store operations are not affected. [1]

2. 2022-09-30

   A second report said part of the data had leaked. The personal data leak covers 3,685 records. [2]

3. 2022-11-01

   A third report said the personal data that may have leaked had grown to 331,005 records in total. [3] [4]

The personal data confirmed to have leaked covers 3,685 records. For store landowners, 2,042 records at Dynam (name and bank account information) and 172 at Yume Corporation (name and payment amount). For business partners, 253 records at Dynam (business card information and similar). For members of the employee shareholding association, 1,218 records (name and securities account information). No misuse has been confirmed. The people concerned were contacted individually and a contact desk was set up. [2]

As the investigation went on, a leak of other data could no longer be ruled out, and it said personal data of customers, landowners, business partners, job applicants, retirees and employees held by seven group companies, 331,005 records in total, may have leaked. By company: Dynam 129,628, Yume Corporation 96,523, Nippon Humap 76,193, Dynam Business Support 24,571, DYNAM JAPAN HOLDINGS 2,135, Cabin Plaza 1,816 and Business Partners 139. The data includes name, address, phone number, birth date, gender, email address and account number. [3] [4]