Kyuhen: ransomware may have exposed about 374,000 personal records
On 5 June 2024 Kyushu Electric Power said part of the internal network of its group company Kyuhen had been accessed by a third party in a ransomware attack. Kyuhen confirmed on 3 June that some data was encrypted, shut down PCs that may have been affected and cut its data storage off the network. It first cited about 104,000 records used in its water heater sales (including about 4,000 entrusted by Kyushu Electric); later investigation added about 270,000 more (about 250,000 from water heater sales and other business, and about 20,000 entrusted by Kyushu Electric for promoting electric appliances), for a total of about 374,000 personal records that may have leaked. Kyushu Electric's own systems and power supply were not affected.
Disclosed
2024-06-05
Organizations involved
2
Leaked or at risk
374K
374,000
Downtime
Unknown
Timeline
- Detected 2024-06-03
- Disclosed 2024-06-05
- 2 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
–
Supply chain
- Organizations listed on this site
- 2
Organizations involved
[Breached][Critical]Fukuoka, FukutsuManufacturing374,000 leaked
Kyuhen Co., Inc.[Through a supplier][Major]Fukuoka, Fukuoka, ChuoElectricity, gas, heat and water20,000 leaked
Kyushu Electric Power Company, IncorporatedSeparately reported an initial approximately 4,000 water-heater sales records and approximately 20,000 additional appliance-promotion records.
Sources
- [1][Official]グループ会社への不正アクセスが発生しました(第1報)Kyushu Electric Power Company · 2024-06-05
- [2][Official]グループ会社への不正アクセス発生についてDaihen · 2024-06-13
- [3][News]キューヘンのランサム被害、個人情報約37.4万件が流出かSecurity NEXT · 2024-06-14