> JapanHacked_
[Investigating][Severity: Critical][Ransomware]

Alps Alpine: ransomware hit group servers and halted production and shipping in Japan and abroad

It detected ransomware on group servers on September 10. Production and shipping were hit at nearly all domestic sites and some overseas ones. Staff data leaked in North America.

Disclosed

2023-09-12

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It detected a ransomware attack on servers managed by the group. [2]

  2. According to Nikkei, from this day production and shipping were affected at nearly all domestic sites and some overseas sites. [1]

  3. It announced the case. It stopped the affected servers or isolated them from the network. [1] [2]

  4. It published a second report. Production and shipping resumed except at its Mexican production site. It confirmed that personal data of employees and business files had leaked at its North American unit. A leak of customer data has not been confirmed. [1]

Impact

Production and shipping were affected at nearly all domestic sites and some overseas sites. The recovery time of the Mexican site was undecided as of September 14. According to Nikkei, data said to be employees' personal information was posted on some sites, and the company was checking whether it is genuine. [1] [2]

Timeline

  1. Detected 2023-09-10
  2. Disclosed 2023-09-12
  3. 2 days

Attack or cause

Method
[Ransomware]
Impact
[Data leak][Service outage]
Entry point
Unknown

Data exposed or at risk

[Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]アルプスアルパイン、不正アクセス被害 内外生産に影響Nikkei · 2023-09-14
  2. [2][News]アルプスアルパイングループ管理サーバにランサムウェア攻撃、生産・出荷等に影響ScanNetSecurity · 2023-09-20 08:05