Shirasaki: ransomware; Otsuka Corporation's customer data may also have leaked
Shirasaki Corporation (Sabae, Fukui), which makes recycled toner and weed-control sheets, disclosed on 20 May 2024 that a system failure since 19 May had stopped it from receiving email and shipping orders normally. It disclosed unauthorized access on 18 June. Its findings of 2 July said its systems failed to start on 19 May and it found several servers hit by ransomware after unauthorized access by a third party. A forensic investigation found records of data sent outside, so a leak of customers' and suppliers' company names, addresses, phone and fax numbers and email addresses could not be ruled out. Otsuka Corporation, which sold Shirasaki's toner products, announced on 4 September that 8,436 of its own customer records (company names, addresses, contact names and phone numbers) may have leaked.
Disclosed
2024-06-18
Organizations involved
2
Leaked or at risk
8.4K
8,436
Downtime
Unknown
Timeline
- Detected 2024-05-19
- Disclosed 2024-06-18
- 30 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Service outage][Data leak]
- Entry point
- Unknown
Data exposed or at risk
Supply chain
Organizations involved
[Breached][Critical]Fukui, SabaeManufacturing
Shirasaki Corporation[Through a supplier][Major]Tokyo, ChiyodaInformation and communications8,436 leaked
Otsuka CorporationSaid 8,436 records of customers who ordered Shirasaki's recycled toner products between 1 January 2012 and 18 May 2024 (2,042 of them through resellers) may have leaked.
Sources
- [1][Official]【重要】システム障害のお知らせとお詫びについてShirasaki · 2024-05-20
- [2][Official]弊社ランサムウェア感染被害における調査結果のご報告Shirasaki · 2024-07-02
- [3][Official]白崎コーポレーションが保有する弊社のお客様情報漏えいの可能性に関するお知らせとお詫びOtsuka · 2024-09-04
- [4][Official]【重要】システム障害の経過についてShirasaki · 2024-06-18