Oiles: ransomware; attackers exploited a VPN vulnerability in the group
Oiles, which makes oil-less bearings, disclosed on 10 June 2024 that it had found unauthorized access to its servers that looked like ransomware on 7 June and cut off its network. Production and shipping were not affected. Its final report on 8 August said the attacker exploited a vulnerability in a VPN function within the group to get in and encrypted files on its servers. No data leak was found, and data that might have leaked did not include customer data. Servers and systems were mostly restored.
Disclosed
2024-06-10
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Detected 2024-06-07
- Disclosed 2024-06-10
- 3 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Service outage]
- Entry point
- VPN device
Data exposed or at risk
–
Organizations involved
[Breached][Moderate]Kanagawa, FujisawaManufacturing
Oiles Corporation
Sources
- [1][Official]当社サーバーへの不正アクセスに関するお知らせOiles · 2024-06-10
- [2][Official]当社サーバーへの不正アクセスに関するお知らせ(第二報)Oiles · 2024-06-21
- [3][Official]当社サーバーへの不正アクセスに関するお知らせ(最終報)Oiles · 2024-08-08