Toyoshima: ransomware; attackers got in with obtained IDs and passwords

Textile trader Toyoshima disclosed on 2 May 2024 that some of its servers had been accessed without authorization and infected with ransomware. A server failure occurred at about 10:00 on 13 April and it found files encrypted. A third-party investigation completed on 30 April found the network had been accessed at about 7:00 that day, likely by a third party who had obtained an ID and password. No traces of personal data being taken were found, but it disclosed that names, addresses, phone numbers, email addresses, bank account numbers, face photos and more of individual business partners, employees (including former employees) and other related people may have leaked. The servers have been restored.