TMT Machinery: ransomware encrypted its business systems, and some data may have leaked

1. 2024-03-18

   It found that its systems had been accessed from outside without authorization, and began investigating the cause and damage with specialists. [1] [2]

2. 2024-03-26

   It announced the case. At that point it had not confirmed any leak of information. [1] [2] [3]

3. 2024-03-28

   Its subsidiary CFC Design announced that it was also affected by the unauthorized access to its systems. [4]

4. 2024-04-09

   It said ransomware had encrypted its business systems and disrupted operations. It received a message demanding a ransom, but said it would not comply and would restore on its own. [2]

5. 2024-05-16

   During recovery it said some data, including personal data of customers, business partners, employees and job applicants, may have leaked. Images of part of the leaked data were posted on the dark web, but they did not contain personal data. Forensic investigation could not identify the route of entry. [2]

Its business systems were encrypted and unusable, which disrupted operations. It reported to and consulted Osaka Prefectural Police and the Personal Information Protection Commission. For recovery it replaced all PCs and built a new network, among other steps. [2]