[Contained][Severity: Moderate][Ransomware]

SIIX: some of its internal servers were accessed through ransomware

It confirmed ransomware access to some internal servers on April 24. Operations were not disrupted and no data leak has been confirmed.

Disclosed

2023-04-28

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2023-04-24
It confirmed that some internal servers had been accessed by a third party through ransomware. It cut the affected servers off from the network to stop the infection spreading. [1] [2]
2023-04-28
It formed a response team with an outside organization and reported to the police. It announced the case. [1] [2]

Impact

Customers' product information and other data may have been encrypted and leaked, but no leak has been confirmed. Business activities were not disrupted. It is identifying the infection route and the range of impact and working on recovery. [1] [2]