Ofuji: ransomware through a VPN device; up to about 200,000 customer records at risk

On 26 January 2024 fishing tackle wholesaler and retailer Ofuji (Osaka) said some customer personal data may have leaked in a ransomware attack. It found the intrusion on 13 December 2023, and the attacker encrypted data on its servers with ransomware. A VPN device used to connect to the internal network from the internet appears to have been abused. Outside investigators found no clear trace of data being taken, but some areas could not be checked, so up to about 200,000 records of customers who received direct mail between March 2018 and November 2023 are at risk: member numbers, names, addresses, birth dates and phone numbers.