> JapanHacked_
[Contained][Severity: Critical][Ransomware][Intrusion]

Sougyo Service: ransomware; customer data of clients such as Shochiku and Taiju Life may have leaked

Sougyo Service (Miyoshi, Saitama), a warehousing and shipping contractor, suffered a system failure on 12 September 2024 that turned out to be a ransomware attack. It issued its first report on 19 September. Its clients then disclosed what may have leaked: Shochiku said the names, addresses, phone numbers and order details of 218,156 buyers, recipients and partners of its online shops such as Shochiku Store; Taiju Life said the names, addresses and phone numbers of up to 70,000 customers who had asked for printed policy terms; Ricoh Japan said data on 3,841 novelty recipients and 2,603 employees. The November findings said the attacker exploited a vulnerability in software used on a server and then deployed ransomware. A leak could not be ruled out, but no actual leak was confirmed.

Disclosed

2024-09-19

Organizations involved

4

Leaked or at risk

218.2K

218,156

Downtime

Unknown

Timeline

  1. Detected 2024-09-12
  2. Disclosed 2024-09-19
  3. 7 days

Supply chain

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社の業務委託先における個人情報漏えいのおそれについてTaiju Life Insurance · 2024-09-20
  2. [2][Official]業務委託先に対する不正アクセスによるお客様情報の流出のおそれについてRicoh Japan · 2024-09-24
  3. [3][Official]個人情報漏洩懸念に関する調査結果のご報告Shochiku · 2024-11-11
  4. [4][Official]業務委託先に対する不正アクセスによるお客様情報の流出のおそれについて(調査結果のご報告)Ricoh Japan · 2024-11-14
  5. [5][News]松竹委託先がサイバー被害 最大23万人個人情報漏えいもNikkei · 2024-09-20