> JapanHacked_
[Resolved][Severity: Moderate][Ransomware]

NISHIO HOLDINGS: group systems were encrypted by LockBit ransomware, with no confirmed data exfiltration

It detected a system failure on July 4 and found it was a cyber attack. Part of its servers and PCs were encrypted by ransomware, but no sign of data being taken out was found.

Disclosed

2024-07-04

Organizations involved

2

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It detected an anomaly in part of its information systems and announced a system failure thought to be caused by a cyber attack. The companies hit were NISHIO HOLDINGS, NISHIO RENT ALL, Nishio Work Support, Nishio Rent All Hokkaido, Nishio Rent All TC and Nishio Kaihatsu. [1] [3]

  2. It published the final report. Digital forensics found that the ransomware "LockBit" had encrypted data on part of its servers and terminals. No specific trace of internal data being taken out and no leak was found, and it judged that data being taken out was very unlikely. The systems were restored. [2]

Timeline

  1. Started, Detected, Disclosed 2024-07-04
  2. 1 days

Attack or cause

Method
[Ransomware]
Impact
[Service outage]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]サイバー攻撃によるシステム障害のお知らせNISHIO HOLDINGS CO., LTD. · 2024-07-04
  2. [2][Official]サイバー攻撃によるシステム障害のお知らせ(最終報告)NISHIO HOLDINGS CO., LTD. · 2024-08-28
  3. [3][News]ニシオホールディングスグループにサイバー攻撃、システム障害が発生ScanNetSecurity · 2024-07-17 08:05