> JapanHacked_
[Resolved][Severity: Moderate][Ransomware][Credential abuse]

ITOCHU Techno-Solutions: a contractor was hit by ransomware and its file sharing service was accessed

A contractor's PC was infected with ransomware and the file sharing service for the work was accessed. A later investigation found no sign that files had been taken.

Disclosed

2024-08-13

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It announced the case. It said a contractor for part of its work was hit by ransomware and the file sharing service for that work was accessed. The files that may have been viewed or taken contained business partners' company information and personal information. It disconnected the PCs affected and reported to the Personal Information Protection Commission. [1] [3]

  2. It published the results. A subcontractor's PC was hit by a brute-force attack, an administrator account and password were stolen, the PC was taken over and ransomware was run. Files on the PC were encrypted and a shared folder in the cloud file sharing service reachable from it was accessed. The subcontractor's PC held no files for its work and no sign of downloads from its file sharing service was found, so it judged there was no risk of a leak. [2]

Timeline

  1. Detected, Disclosed 2024-08-13
  2. 1 days

Attack or cause

Method
[Ransomware][Credential abuse]
Impact
Entry point
Supplier

Data exposed or at risk

–

Supply chain

Organizations listed on this site
1

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによる情報漏洩のおそれについてITOCHU Techno-Solutions Corporation · 2024-08-13
  2. [2][Official]不正アクセス調査結果のご報告ITOCHU Techno-Solutions Corporation · 2024-10-07
  3. [3][News]CTC 業務委託先にランサムウェア攻撃、個人情報含むファイル 閲覧・持ち出しの可能性ScanNetSecurity · 2024-08-22 08:05