> JapanHacked_
[Contained][Severity: Moderate][Intrusion][Malware]

Cocolonet: intrusion into its servers; malware had been running for two months

On 26 January 2024 Cocolonet (TSE Standard 6060), which runs funeral and wedding services, disclosed unauthorized access to its servers. On 16 January its servers became unreachable, and an internal check found altered passwords and unknown files on two servers and heavy access to two others. Its findings of 1 March said an intruder had accessed a server and run malware as early as 22 November 2023, with the same on another server on 22 December. There were further intrusions and password changes from 14 to 16 January 2024, but no traces of files being viewed or transferred, and the company concluded a personal data leak was very unlikely.

Disclosed

2024-01-26

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

Timeline

  1. Started 2023-11-22
  2. Detected 2024-01-16
  3. Disclosed 2024-01-26
  4. 65 days

Attack or cause

Method
[Intrusion][Malware]
Impact
[Service outage]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]第三者による当社サーバーへの不正アクセス被害のお知らせCocolonet · 2024-01-26
  2. [2][Official](開示事項の経過)当社サーバーへの不正アクセス被害に関する調査結果のご報告Cocolonet · 2024-03-01