e431: ransomware hits an internal server; pre-2021 online shop customer data may have leaked
e431 (Higashinada, Kobe), which sells network equipment and TV-related supplies, disclosed on 9 August 2024 that an internal system server had been infected with ransomware and personal data may have leaked. It found the infection on 10 June and physically cut the server off the network; an investigation reported on 23 July found that names, company names, addresses and other details of customers who registered or ordered on its online shop before March 2021 may have leaked. The cause was unauthorized access exploiting a vulnerability in the server, which was not the server of its e431.jp shop. No card data leaked.
Disclosed
2024-08-09
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Detected 2024-06-10
- Disclosed 2024-08-09
- 60 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Hyogo, Kobe, HigashinadaWholesale and retail trade
e431 Inc.
Sources
- [1][Official]個人情報漏洩に関するお詫びとご報告e431 · 2024-08-09