> JapanHacked_
[Contained][Severity: Critical][Ransomware]

KAGA ELECTRONICS: servers of its Thai subsidiary were hit by an apparent ransomware attack and it stopped the servers and PCs

Servers of the Thai subsidiary were attacked on December 2 and it stopped servers and PCs. By December 12 they were mostly restored and production resumed.

Disclosed

2022-12-12

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Late at night an apparent ransomware attack on the servers came to light. It reported to the local police and other bodies, stopped the servers and PCs and cut external network access. [1]

  2. Together with other EMS sites it began restoring from data saved on edge terminals, and reported to its customers individually. [1]

  3. It announced that internal servers and the network were mostly restored and production had resumed. [1] [2]

Timeline

  1. Started, Detected 2022-12-02
  2. Disclosed 2022-12-12
  3. 10 days

Attack or cause

Method
[Ransomware]
Impact
[Service outage]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社海外子会社サーバーへの不正アクセス発生についてKAGA ELECTRONICS CO., LTD. · 2022-12-12
  2. [2][News]加賀電子タイ子会社にランサムウェア攻撃、現在はおおむね復旧ScanNetSecurity · 2022-12-16 08:05