> JapanHacked_
[Investigating][Severity: Moderate][Ransomware]

Restar: ransomware hit its group servers, affecting shipping and customer support

On December 5, ransomware thought to be Lockbit breached the servers of seven group companies. Internal systems failed, affecting shipping and support.

Disclosed

2023-12-06

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It confirmed that the servers of the parent and of Lester Electronics, Lester Devices, Lester Communications, Lester Solution Support, Vitec Enesta and Vitec Vegetable Factory were accessed by ransomware thought to be Lockbit, and internal systems failed. It stopped the servers and cut the external network. [1]

  2. It announced the case. With outside experts it is investigating the cause, the route and the extent of the leak. [1] [2]

  3. Some group companies published a follow-up saying newly found leaked information. [3]

  4. It published a third report. It was reported that multiple file servers had been accessed through a VPN. [4]

Impact

The leak confirmed so far is 14 items: two images of file server folder information, four system drawings of Lester Communications and eight items such as sample images. Shipments to customers continue, and sales staff will contact customers if deliveries are delayed. [1]

Timeline

  1. Started, Detected 2023-12-05
  2. Disclosed 2023-12-06
  3. 1 days

Attack or cause

Method
[Ransomware]
Impact
[Data leak][Service outage]
Entry point
VPN device

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社及びグループ会社サーバーへの不正アクセス発生のお知らせRestar Corporation · 2023-12-06
  2. [2][News]レスターホールディングスにランサムウェア攻撃、出荷やカスタマーサポートにも影響ScanNetSecurity · 2023-12-19 08:05
  3. [3][News]レスターグループへの Lockbit によるランサムウェア攻撃、新たな情報漏えいが判明ScanNetSecurity · 2023-12-20 08:05
  4. [4][News]レスターグループへのランサムウェア攻撃、VPN 経由し複数のファイルサーバに不正アクセスScanNetSecurity · 2024-01-16 08:05