> JapanHacked_
[Contained][Severity: Critical][Ransomware][Phishing]

KADOKAWA: ransomware attack on Niconico and other group services

Ransomware hit the group's data center on 8 June 2024, disrupting Niconico and other services. BlackSuit claimed responsibility. Dwango's 5 August findings presume that employee account data was stolen through phishing or a similar attack, while saying the exact route and method remained unknown. It confirmed leakage of personal data on 254,241 people, including business contacts, creators, employees, and students and families of Kadokawa Dwango Educational Institute. Fields include names, birth dates, addresses, phones, email, educational backgrounds, bank details, and personnel and student data. Leakage of Niconico users' login credentials and card data was not confirmed. Niconico video reopened on 5 August after 58 days; that does not establish full recovery of the entire group.

Disclosed

2024-06-09

Organizations involved

2

Leaked or at risk

254.2K

254,241

Downtime

58 days

Timeline

  1. Started, Detected 2024-06-08
  2. Disclosed 2024-06-09
  3. 1 days

Attack or cause

Method
[Ransomware][Phishing]
Impact
[Service outage][Data leak][Extortion]
Entry point
Stolen credentials
Actor
BlackSuit Ransomware group · Claimed
Ransom
Demanded · Paid: Unknown

Data exposed or at risk

[Name][Date of birth][Postal address][Phone number][E-mail address][Education][Bank account][Employment]

Organizations involved

Open in organization search

Sources

  1. [1][News]KADOKAWA、25万人の個人情報漏洩 N高生の学歴などNikkei · 2024-08-05
  2. [2][Research]KADOKAWAへのサイバー攻撃の経緯Penta Security
  3. [3][Official]ランサムウェア攻撃による情報漏洩に関するお知らせDwango · 2024-08-05