> JapanHacked_
[Contained][Severity: Major][Ransomware]

Kinsho Store: ransomware hit servers at its data center and personal data of about 36,000 people, including net supermarket members, may have leaked

On October 31 it detected abnormal server stops and found ransomware. It suspended net supermarket orders. Data of about 17,000 members and others may have leaked.

Disclosed

2023-11-02

Organizations involved

1

Leaked or at risk

36K

36,000

Downtime

Unknown

What happened

  1. It detected abnormal stops of servers in its data center a little after 7 a.m. With the specialist firm that maintains them it urgently checked all servers and confirmed a ransomware attack. It blocked access to the attacked servers and suspended net supermarket orders for the time being. [1] [2]

  2. It announced the case. It consulted the police and reported to the Personal Information Protection Commission. [1] [2]

  3. It published a follow-up report. It said no trace of information having leaked was found. [3]

Impact

Personal data of about 17,000 KINSHO and Harve net supermarket members (name, address, phone number, email address and birth date), about 12,000 employees and their dependents and about 7,000 customers who made inquiries, plus about 1,400 transaction records on business partners, may have leaked. No card or other payment data is included. No damage has been reported. Stores operate as usual. [1] [2]

Timeline

  1. Started, Detected 2023-10-31
  2. Disclosed 2023-11-02
  3. 2 days

Organizations involved

Open in organization search

Sources

  1. [1][News]近商ストア、ネットスーパー会員1.7万人の個人情報漏洩かNikkei · 2023-11-02
  2. [2][News]近商ストアのサーバにランサムウェア攻撃、ネットスーパーの営業は当面見合わせScanNetSecurity · 2023-11-13 08:05
  3. [3][News]近商ストアのサーバにランサムウェア攻撃、情報流出の痕跡は見当たらずScanNetSecurity · 2024-03-25 08:05