Kinsho Store: ransomware hit servers at its data center and personal data of about 36,000 people, including net supermarket members, may have leaked
On October 31 it detected abnormal server stops and found ransomware. It suspended net supermarket orders. Data of about 17,000 members and others may have leaked.
Disclosed
2023-11-02
Organizations involved
1
Leaked or at risk
36K
36,000
Downtime
Unknown
What happened
It detected abnormal stops of servers in its data center a little after 7 a.m. With the specialist firm that maintains them it urgently checked all servers and confirmed a ransomware attack. It blocked access to the attacked servers and suspended net supermarket orders for the time being. [1] [2]
It announced the case. It consulted the police and reported to the Personal Information Protection Commission. [1] [2]
It published a follow-up report. It said no trace of information having leaked was found. [3]
Impact
Personal data of about 17,000 KINSHO and Harve net supermarket members (name, address, phone number, email address and birth date), about 12,000 employees and their dependents and about 7,000 customers who made inquiries, plus about 1,400 transaction records on business partners, may have leaked. No card or other payment data is included. No damage has been reported. Stores operate as usual. [1] [2]
Timeline
- Started, Detected 2023-10-31
- Disclosed 2023-11-02
- 2 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak][Service outage]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Osaka, MatsubaraWholesale and retail trade36,000 leaked
Kinsho Store Co., Ltd.
Sources
- [1][News]近商ストア、ネットスーパー会員1.7万人の個人情報漏洩かNikkei · 2023-11-02
- [2][News]近商ストアのサーバにランサムウェア攻撃、ネットスーパーの営業は当面見合わせScanNetSecurity · 2023-11-13 08:05
- [3][News]近商ストアのサーバにランサムウェア攻撃、情報流出の痕跡は見当たらずScanNetSecurity · 2024-03-25 08:05