Takano Sogo Accounting: ransomware puts client data of Tokio Marine group firms and others at risk

On 10 June 2024 the Takano Sogo group, including Takano Sogo Accounting, disclosed a ransomware attack. After an alert on its data management server on the night of 4 June it isolated the server and cut its internet connection, and on the night of 6 June it confirmed ransomware damage. ScanNetSecurity's report on the 11 September findings attributes the cause to a network-device configuration error. The encrypted data includes names, addresses, phone numbers and other data entrusted by clients. A small amount of outbound traffic was found, so a leak cannot be ruled out, but no outflow or publication has been confirmed. Among its clients, Tokio Marine & Nichido Life said 27,824 contract records and 82 former employee records were at risk, Tokio Marine & Nichido Fire 3,957 claims assessment records and more, and Suruga Bank said customer data may be included.