> JapanHacked_
[Investigating][Severity: Major][Ransomware]

Central Information Systems: ransomware encrypted its servers and part of the personal and company information it holds leaked

Late on June 25 it found its servers encrypted. On the 27th it confirmed leaks of data including personal and company information and cut off all servers and devices.

Disclosed

2023-06-29

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Late at night Japan time it confirmed ransomware damage in which some servers were encrypted. [1] [2]

  2. It confirmed that part of the data, including personal and company information, had leaked to outside. [1] [2]

  3. It announced the case. It disconnected all servers and client devices from internal and external networks and stopped using them. The website and email work normally. It set up a response headquarters and is contacting customers and related parties in turn. No damage to other group companies has been confirmed. [1] [2]

  4. In a second report it announced that it had confirmed the leaked data published on the dark web. [3]

Timeline

  1. Started, Detected 2023-06-25
  2. Disclosed 2023-06-29
  3. 4 days

Attack or cause

Method
[Ransomware]
Impact
[Service outage][Data leak]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社サーバーへの不正アクセスに関するお知らせCentral Information Systems Co., Ltd. · 2023-06-29
  2. [2][News]JBグループのシーアイエスにランサムウェア攻撃、個人・企業情報含む一部データが外部流出ScanNetSecurity · 2023-07-05 08:05
  3. [3][News]JBグループのシーアイエスにランサムウェア攻撃、ダークウェブでのデータ公開を確認ScanNetSecurity · 2023-07-10 08:05