KADOKAWA: ransomware attack on Niconico and other group services
Ransomware hit the group's data center on 8 June 2024, disrupting Niconico and other services. BlackSuit claimed responsibility. Dwango's 5 August findings presume that employee account data was stolen through phishing or a similar attack, while saying the exact route and method remained unknown. It confirmed leakage of personal data on 254,241 people, including business contacts, creators, employees, and students and families of Kadokawa Dwango Educational Institute. Fields include names, birth dates, addresses, phones, email, educational backgrounds, bank details, and personnel and student data. Leakage of Niconico users' login credentials and card data was not confirmed. Niconico video reopened on 5 August after 58 days; that does not establish full recovery of the entire group.
Disclosed
2024-06-09
Organizations involved
2
Leaked or at risk
254.2K
254,241
Downtime
58 days
Timeline
- Started, Detected 2024-06-08
- Disclosed 2024-06-09
- 1 days
Attack or cause
- Method
- [Ransomware][Phishing]
- Impact
- [Service outage][Data leak][Extortion]
- Entry point
- Stolen credentials
- Actor
- BlackSuit Ransomware group · Claimed
- Ransom
- Demanded · Paid: Unknown
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, ChuoInformation and communications
Dwango Co., Ltd.[Breached][Critical]Tokyo, ChiyodaInformation and communications254,241 leaked
KADOKAWA Corporation
Sources
- [1][News]KADOKAWA、25万人の個人情報漏洩 N高生の学歴などNikkei · 2024-08-05
- [2][Research]KADOKAWAへのサイバー攻撃の経緯Penta Security
- [3][Official]ランサムウェア攻撃による情報漏洩に関するお知らせDwango · 2024-08-05