> JapanHacked_
[Investigating][Severity: Critical][Ransomware]

Kyuhen: ransomware may have exposed about 374,000 personal records

On 5 June 2024 Kyushu Electric Power said part of the internal network of its group company Kyuhen had been accessed by a third party in a ransomware attack. Kyuhen confirmed on 3 June that some data was encrypted, shut down PCs that may have been affected and cut its data storage off the network. It first cited about 104,000 records used in its water heater sales (including about 4,000 entrusted by Kyushu Electric); later investigation added about 270,000 more (about 250,000 from water heater sales and other business, and about 20,000 entrusted by Kyushu Electric for promoting electric appliances), for a total of about 374,000 personal records that may have leaked. Kyushu Electric's own systems and power supply were not affected.

Disclosed

2024-06-05

Organizations involved

2

Leaked or at risk

374K

374,000

Downtime

Unknown

Timeline

  1. Detected 2024-06-03
  2. Disclosed 2024-06-05
  3. 2 days

Attack or cause

Method
[Ransomware]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

–

Supply chain

Organizations involved

Open in organization search

Sources

  1. [1][Official]グループ会社への不正アクセスが発生しました(第1報)Kyushu Electric Power Company · 2024-06-05
  2. [2][Official]グループ会社への不正アクセス発生についてDaihen · 2024-06-13
  3. [3][News]キューヘンのランサム被害、個人情報約37.4万件が流出かSecurity NEXT · 2024-06-14