> JapanHacked_
[Resolved][Severity: Moderate][Ransomware]

Oiles: ransomware; attackers exploited a VPN vulnerability in the group

Oiles, which makes oil-less bearings, disclosed on 10 June 2024 that it had found unauthorized access to its servers that looked like ransomware on 7 June and cut off its network. Production and shipping were not affected. Its final report on 8 August said the attacker exploited a vulnerability in a VPN function within the group to get in and encrypted files on its servers. No data leak was found, and data that might have leaked did not include customer data. Servers and systems were mostly restored.

Disclosed

2024-06-10

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

Timeline

  1. Detected 2024-06-07
  2. Disclosed 2024-06-10
  3. 3 days

Attack or cause

Method
[Ransomware]
Impact
[Service outage]
Entry point
VPN device

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社サーバーへの不正アクセスに関するお知らせOiles · 2024-06-10
  2. [2][Official]当社サーバーへの不正アクセスに関するお知らせ(第二報)Oiles · 2024-06-21
  3. [3][Official]当社サーバーへの不正アクセスに関するお知らせ(最終報)Oiles · 2024-08-08