Right-on: ransomware hit its servers, and a leak of personal data cannot be ruled out

1. 2023-10-21

   It confirmed intrusion activity on its servers. Someone is thought to have accessed the internal network without authorization and run ransomware to encrypt data. It took measures at once to stop the damage from spreading. [1]

2. 2023-10-26

   It reported to the Personal Information Protection Commission. [1]

3. 2023-10-27

   It announced the case. [1] [2]

No fact of information, including personal data, flowing out or being published by the attacker has been confirmed. A leak cannot be completely ruled out, however. Payment on its official online shop is outsourced, and it holds no credit card data. [1]