KOKUYO: some of the group's information systems were hit by a ransomware attack

1. 2023-06-05

   From June 5 to 6 Japan time it was attacked from outside with ransomware. It began initial response immediately and set up a company-wide response headquarters. [1] [2]

2. 2023-06-08

   It announced the case. It is examining the range of impact with advice from outside experts and has begun consulting the authorities. [1] [2]

3. 2023-08-07

   It published the investigation result. An outside investigation firm confirmed no fact of information being made public or flowing out. It was told that the leak risk is extremely low because the volume of data sent out in the network logs was small, but since unauthorized access did occur it cannot rule out a leak completely, and it is notifying the people concerned in turn. Credit card data on its e-commerce sites is handled by payment companies and is out of scope. [3]

4. 2023-09-12

   ASKUL announced that customer data of "ASKUL", "SOLOEL ARENA" and "LOHACO", whose direct-delivery service it outsources to Kokuyo, was also within the scope. The attack is thought to have started with an intrusion into the network of Kokuyo's overseas local entity, where ransomware was created and run. [4] [5]

The information systems are being brought back into operation in turn, and some systems are being protected and restored with outside experts. Whether personal or customer information leaked is being checked, and the effect on results is being examined. [1] [2]

Order data of 30,263 direct-delivery items that Kokuyo delivered for ASKUL customers between March 13, 2019 and June 6, 2023 (recipient name, company, address and phone number) was within the scope. A leak to outside has not been confirmed, but cannot be ruled out completely. [4] [5]