[Contained][Severity: Major][Ransomware][Intrusion]

OSG: its servers were hit by a ransomware intrusion, internal systems stopped and orders and shipments were slightly affected

A ransomware intrusion disrupted internal systems in the early morning of April 12. About 27,000 personal data records may have leaked.

Disclosed

2023-04-14

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2023-04-12
In the early morning it confirmed that a third party's ransomware intrusion had disrupted internal systems. It stopped the servers and cut the network to the outside. [1]
2023-04-14
It announced the case as a stop of all systems. [2]
2023-04-20
It published a second report. Production ran as usual and the effect on orders and shipments was recovering step by step. [1] [3]
2023-06-12
In a third report it announced that a third-party investigation finished on May 24. The intrusion was on April 8 and encryption on April 12, and it judged that part of the data was sent outside. About 27,000 personal data records may have leaked. The servers have been restored. [4] [5]

Impact

The possibility that customer and personal data leaked cannot be fully ruled out, but no leak has been confirmed. Orders and shipments were slightly affected, but operations were not hindered and the effect on results is expected to be minor. It consulted the Aichi prefectural police and notified the Personal Information Protection Commission. [1] [3]