Restar: ransomware hit its group servers, affecting shipping and customer support
On December 5, ransomware thought to be Lockbit breached the servers of seven group companies. Internal systems failed, affecting shipping and support.
Disclosed
2023-12-06
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It confirmed that the servers of the parent and of Lester Electronics, Lester Devices, Lester Communications, Lester Solution Support, Vitec Enesta and Vitec Vegetable Factory were accessed by ransomware thought to be Lockbit, and internal systems failed. It stopped the servers and cut the external network. [1]
It announced the case. With outside experts it is investigating the cause, the route and the extent of the leak. [1] [2]
Some group companies published a follow-up saying newly found leaked information. [3]
It published a third report. It was reported that multiple file servers had been accessed through a VPN. [4]
Impact
The leak confirmed so far is 14 items: two images of file server folder information, four system drawings of Lester Communications and eight items such as sample images. Shipments to customers continue, and sales staff will contact customers if deliveries are delayed. [1]
Timeline
- Started, Detected 2023-12-05
- Disclosed 2023-12-06
- 1 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak][Service outage]
- Entry point
- VPN device
Data exposed or at risk
–
Organizations involved
[Breached][Moderate]Tokyo, MinatoWholesale and retail trade
Restar Corporation
Sources
- [1][Official]当社及びグループ会社サーバーへの不正アクセス発生のお知らせRestar Corporation · 2023-12-06
- [2][News]レスターホールディングスにランサムウェア攻撃、出荷やカスタマーサポートにも影響ScanNetSecurity · 2023-12-19 08:05
- [3][News]レスターグループへの Lockbit によるランサムウェア攻撃、新たな情報漏えいが判明ScanNetSecurity · 2023-12-20 08:05
- [4][News]レスターグループへのランサムウェア攻撃、VPN 経由し複数のファイルサーバに不正アクセスScanNetSecurity · 2024-01-16 08:05