Izumi: ransomware; data of up to about 7.78 million Youme Card members may have been viewed

On 22 February 2024 Izumi disclosed a ransomware attack that encrypted some servers of its group. According to its update of 9 May, it detected an intrusion into a group company's server on 15 February and immediately cut off the group's entire network. The attackers targeted the VPN device that receives outside connections, broke straight into the servers and made some data unusable. Traffic logs showed no sign of data going out, and the company considers a leak very unlikely, but because viewing cannot be ruled out it is notifying holders of up to 7,782,009 Youme Card member records (names, phone numbers, addresses, birth dates, sex and more) and up to 2,990 part-time job applicants of Izumi Techno. Card data is kept in a separate system and did not leak.