agnès b. Japan: ransomware; some business data leaked
On 9 January 2024 agnès b. Japan said a server it manages had been accessed without authorization. The intrusion was found on 26 December 2023; the company cut network connections to stop the damage and investigated with outside specialists. According to Security NEXT, the company explained in a March update that the damage came from a cyberattack by the LockBit ransomware group and that some business data stored on the server had leaked. It may include names, addresses, phone numbers, birth dates, sex and email addresses, but no leak of customer personal data has been confirmed. The company installed new anti-malware software with round-the-clock monitoring and changed all system passwords.
Disclosed
2024-01-09
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Detected 2023-12-26
- Disclosed 2024-01-09
- 14 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak]
- Entry point
- Unknown
- Actor
- LockBit Ransomware group · Attributed
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, ShibuyaWholesale and retail trade
agnès b. Japan Inc.
Sources
- [1][News]ファッション取り扱いアニエスベージャパンに不正アクセスScanNetSecurity · 2024-01-22
- [2][News]ランサムウェア被害による情報流出を確認 - アニエスベーSecurity NEXT · 2024-03-21