Alps Alpine: ransomware hit group servers and halted production and shipping in Japan and abroad
It detected ransomware on group servers on September 10. Production and shipping were hit at nearly all domestic sites and some overseas ones. Staff data leaked in North America.
Disclosed
2023-09-12
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It detected a ransomware attack on servers managed by the group. [2]
According to Nikkei, from this day production and shipping were affected at nearly all domestic sites and some overseas sites. [1]
It announced the case. It stopped the affected servers or isolated them from the network. [1] [2]
It published a second report. Production and shipping resumed except at its Mexican production site. It confirmed that personal data of employees and business files had leaked at its North American unit. A leak of customer data has not been confirmed. [1]
Impact
Production and shipping were affected at nearly all domestic sites and some overseas sites. The recovery time of the Mexican site was undecided as of September 14. According to Nikkei, data said to be employees' personal information was posted on some sites, and the company was checking whether it is genuine. [1] [2]
Timeline
- Detected 2023-09-10
- Disclosed 2023-09-12
- 2 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak][Service outage]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, OtaManufacturing
Alps Alpine Co., Ltd.
Sources
- [1][News]アルプスアルパイン、不正アクセス被害 内外生産に影響Nikkei · 2023-09-14
- [2][News]アルプスアルパイングループ管理サーバにランサムウェア攻撃、生産・出荷等に影響ScanNetSecurity · 2023-09-20 08:05