Sougyo Service: ransomware; customer data of clients such as Shochiku and Taiju Life may have leaked
Sougyo Service (Miyoshi, Saitama), a warehousing and shipping contractor, suffered a system failure on 12 September 2024 that turned out to be a ransomware attack. It issued its first report on 19 September. Its clients then disclosed what may have leaked: Shochiku said the names, addresses, phone numbers and order details of 218,156 buyers, recipients and partners of its online shops such as Shochiku Store; Taiju Life said the names, addresses and phone numbers of up to 70,000 customers who had asked for printed policy terms; Ricoh Japan said data on 3,841 novelty recipients and 2,603 employees. The November findings said the attacker exploited a vulnerability in software used on a server and then deployed ransomware. A leak could not be ruled out, but no actual leak was confirmed.
Disclosed
2024-09-19
Organizations involved
4
Leaked or at risk
218.2K
218,156
Downtime
Unknown
Timeline
- Detected 2024-09-12
- Disclosed 2024-09-19
- 7 days
Attack or cause
- Method
- [Ransomware][Intrusion]
- Impact
- [Data leak][Service outage]
- Entry point
- Unknown
Data exposed or at risk
Supply chain
[Breached]
[Breached]
- Organizations listed on this site
- 4
Services hit
Organizations involved
[Through a supplier][Critical]Tokyo, ChuoInformation and communications218,156 leaked
Shochiku Co., Ltd.[Through a supplier][Major]Tokyo, MinatoFinance and insurance70,000 leaked
Taiju Life Insurance Company, LimitedUp to 70,000 customers
[Through a supplier][Major]Tokyo, OtaWholesale and retail trade3,841 leaked
Ricoh Japan Corporation3,841 customer records and 2,603 employees
[Breached][Major]Saitama, MiyoshiTransport and postal services
Sougyo Service Co., Ltd.
Sources
- [1][Official]当社の業務委託先における個人情報漏えいのおそれについてTaiju Life Insurance · 2024-09-20
- [2][Official]業務委託先に対する不正アクセスによるお客様情報の流出のおそれについてRicoh Japan · 2024-09-24
- [3][Official]個人情報漏洩懸念に関する調査結果のご報告Shochiku · 2024-11-11
- [4][Official]業務委託先に対する不正アクセスによるお客様情報の流出のおそれについて(調査結果のご報告)Ricoh Japan · 2024-11-14
- [5][News]松竹委託先がサイバー被害 最大23万人個人情報漏えいもNikkei · 2024-09-20