Meira: ransomware; attackers got in with a group company's administrator account

On 26 April 2024 Meira, a Nagoya maker of bolts and precision parts, disclosed a ransomware attack that encrypted several servers. According to its second report of 18 July, it found the damage early on 20 April, cut external network connections and consulted Aichi police. The attackers misused a group company's administrator account and entered the internal network through a cloud system the companies share. Although nothing confirms a leak, the company cannot rule one out and listed data of business partners (company names, addresses, names, phone numbers), shareholders (names, addresses, holdings, bank accounts, some My Number records), job candidates (names, addresses, birth dates, schools, photos) and current and former employees (names, addresses, birth dates, phone numbers). No misuse has been found.