Shibayama Consultant: ransomware; personal data from Aichi and Gifu public works may have leaked

On 30 June 2024 servers holding data of the five firms in the Shibayama group, including construction consultancy Shibayama Consultant (Higashi, Nagoya), were accessed without authorization and their data was encrypted by ransomware. According to Security NEXT, the group disclosed the incident on 12 July, and its follow-up of 12 September said personal data, including data entrusted by clients, may have leaked. The cause could not be pinned down, but phishing was suspected. On the same day its clients Aichi Prefecture, the Aichi Prefectural Housing Supply Corporation and Gifu Prefecture also announced the case. For the corporation, 42 people were affected (addresses, names, phone numbers, driver's license numbers and more); for Gifu, 12 parties (11 people and 1 company) in a property survey for river works, with names, addresses, family makeup, birth dates, phone numbers and compensation details. The affected servers have been restored.