> JapanHacked_
[Contained][Severity: Major][Ransomware]

agnès b. Japan: ransomware; some business data leaked

On 9 January 2024 agnès b. Japan said a server it manages had been accessed without authorization. The intrusion was found on 26 December 2023; the company cut network connections to stop the damage and investigated with outside specialists. According to Security NEXT, the company explained in a March update that the damage came from a cyberattack by the LockBit ransomware group and that some business data stored on the server had leaked. It may include names, addresses, phone numbers, birth dates, sex and email addresses, but no leak of customer personal data has been confirmed. The company installed new anti-malware software with round-the-clock monitoring and changed all system passwords.

Disclosed

2024-01-09

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

Timeline

  1. Detected 2023-12-26
  2. Disclosed 2024-01-09
  3. 14 days

Attack or cause

Method
[Ransomware]
Impact
[Data leak]
Entry point
Unknown
Actor
LockBit Ransomware group · Attributed

Data exposed or at risk

[Name][Postal address][Phone number][Date of birth][Gender][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]ファッション取り扱いアニエスベージャパンに不正アクセスScanNetSecurity · 2024-01-22
  2. [2][News]ランサムウェア被害による情報流出を確認 - アニエスベーSecurity NEXT · 2024-03-21