ITOCHU Techno-Solutions: a contractor was hit by ransomware and its file sharing service was accessed
A contractor's PC was infected with ransomware and the file sharing service for the work was accessed. A later investigation found no sign that files had been taken.
Disclosed
2024-08-13
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It announced the case. It said a contractor for part of its work was hit by ransomware and the file sharing service for that work was accessed. The files that may have been viewed or taken contained business partners' company information and personal information. It disconnected the PCs affected and reported to the Personal Information Protection Commission. [1] [3]
It published the results. A subcontractor's PC was hit by a brute-force attack, an administrator account and password were stolen, the PC was taken over and ransomware was run. Files on the PC were encrypted and a shared folder in the cloud file sharing service reachable from it was accessed. The subcontractor's PC held no files for its work and no sign of downloads from its file sharing service was found, so it judged there was no risk of a leak. [2]
Timeline
- Detected, Disclosed 2024-08-13
- 1 days
Attack or cause
- Method
- [Ransomware][Credential abuse]
- Impact
- Entry point
- Supplier
Data exposed or at risk
–
Supply chain
[Breached]
[Breached]
- Organizations listed on this site
- 1
Organizations involved
[Through a supplier][Moderate]Tokyo, MinatoInformation and communications
ITOCHU Techno-Solutions Corporation
Sources
- [1][Official]不正アクセスによる情報漏洩のおそれについてITOCHU Techno-Solutions Corporation · 2024-08-13
- [2][Official]不正アクセス調査結果のご報告ITOCHU Techno-Solutions Corporation · 2024-10-07
- [3][News]CTC 業務委託先にランサムウェア攻撃、個人情報含むファイル 閲覧・持ち出しの可能性ScanNetSecurity · 2024-08-22 08:05