JACCS: ransomware hit its servers and encrypted data of its electronic form service
It confirmed unauthorized access to servers on July 25. Ransomware encrypted data of its electronic form service. Loans, cards and other services were not affected.
Disclosed
2023-07-28
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It confirmed unauthorized access to its servers. To stop the damage from spreading it cut external communications and had an outside expert run a forensic investigation. [1] [2] [3]
It announced the case, saying that the use of loans, credit cards and other services was not affected. [1] [2]
It published a follow-up. Ransomware had encrypted the data of its electronic form service, which handles settlement data with merchants. No trace of a leak has been confirmed. [3]
Impact
The encrypted data of the electronic form service includes personal information. Loans, credit cards and other services were not affected, and no trace of a leak has been confirmed. [3]
Timeline
- Detected 2023-07-25
- Disclosed 2023-07-28
- 3 days
Attack or cause
- Method
- [Ransomware]
- Impact
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Major]Tokyo, KotoFinance and insurance
JACCS Co., Ltd.
Sources
- [1][News]ジャックス、サーバーが不正アクセス被害Cyber Security.com · 2023-08-02
- [2][News]ジャックスのサーバに不正アクセス、ローンやクレジットカードなど各種サービスへ影響なしScanNetSecurity · 2023-08-07 08:05
- [3][News]ジャックスにランサムウェア攻撃、電子帳票サービスのデータに被害ScanNetSecurity · 2023-08-24 08:05