> JapanHacked_
[Investigating][Severity: Major][Intrusion]

Sanyo Bussan: unauthorized access encrypted data on multiple servers, and customer, partner and staff personal data may have leaked

On August 27 internal systems became inaccessible, and data on multiple servers had been encrypted. A leak of customer, partner and staff personal data cannot be ruled out.

Disclosed

2024-09-06

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Early in the morning it found that internal systems could not be accessed. An investigation showed data on multiple servers had been encrypted without authorization. It blocked access to all servers that might have been accessed. [1] [2]

  2. It reported to the police. [1]

  3. It reported to the Personal Information Protection Commission. [1]

  4. It announced the possibility of a personal data leak, saying no misuse of personal data had been confirmed. [1] [2]

Timeline

  1. Detected 2024-08-27
  2. Disclosed 2024-09-06
  3. 10 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak][Service outage]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]複数サーバが暗号化、個人情報流出の可能性 - 三陽物産Security NEXT · 2024-09-24
  2. [2][News]三陽物産に不正アクセス、データが不正に暗号化ScanNetSecurity · 2024-09-24 08:05