Avenue: ransomware through a maintenance contractor's settings error; tenant data at risk

Avenue (Suginami, Tokyo), which manages rental property, disclosed on 26 August 2024 that in early April server equipment at the company and a related company had been infected with ransomware and customer data may have leaked. The direct cause was a configuration mistake by its system maintenance contractor when changing the settings of a security device, and traces of unauthorized access by a third party were found. The gap has been closed, but whether data was actually taken before then is unknown. Affected are application details of current and former tenants, such as names, addresses, birth dates, phone numbers and email addresses, plus their employers, employer addresses and employer phone numbers.