Diamond, Inc.: ransomware hit its servers, and it warned of suspicious emails

1. 2023-12-07

   It confirmed that some servers were accessed by ransomware. [1]

2. 2023-12-11

   It announced the case. It set up a task force and is investigating with outside specialists. It has reported to the Personal Information Protection Commission and is working with investigators. [1] [2]

3. 2024-02-14

   It published the investigation results. It has not confirmed that personal data flowed out, but given traces of unauthorized access and encrypted files, said about 70,000 records may have leaked. [3] [4]

It is still checking what information was on the affected servers, and has not stated whether or how much leaked. It asks customers and business partners not to open attachments or links in suspicious emails they do not recognize. [1]

About 70,000 records may have leaked: customer names, addresses and email addresses, and business partner company names, representative and contact names, addresses and email addresses. The servers did not hold credit card data, magazine subscriber data or web member data. No secondary harm has been reported. [3] [4]