[Contained][Severity: Major][Ransomware][Intrusion]

Tokyo Kikai Seisakusho: servers of a consolidated subsidiary were attacked with LockBit 2.0 and customers' personal data may have leaked

Servers of a subsidiary were hit by LockBit 2.0, found on November 5, 2022, and customer company names and contact details may have leaked.

Disclosed

2023-01-30

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2022-11-05
It found an attack on the servers of a consolidated subsidiary in Osaka. It was carried out with LockBit 2.0 and displayed the attacker's message. The servers were restored from backups. [1] [2]
2023-01-30
It notified the Personal Information Protection Commission and the police, and announced the case. [1] [2]

Impact

For customers from April 1, 2018 to November 4, 2022, company names, phone numbers, email addresses, addresses and order and shipping history, and the addresses and phone numbers of some individuals, may have leaked. The entry route is thought to be a vulnerability in security equipment on the internet line. [1] [2]