Nichii: ransomware on group PCs encrypts about 26,000 files; no trace of a leak

On 16 August 2024 Nichii Holdings disclosed a ransomware attack on its group. According to its final report of 22 November, one PC at subsidiary Nichii Care Palace was infected through an outside cyberattack, and the ransomware run on it encrypted about 26,000 files on 16 PCs of the holding company and subsidiary Nichii Gakkan. Some files held personal data of customers, contacts at partner companies, job candidates and current and former employees, but outside specialists found no trace of a leak. The website and core systems were not affected, and the vulnerability used to get in has been fixed.