ZACROS: ransomware; 38 staff records confirmed leaked and wider personal data at risk

Packaging and industrial materials maker ZACROS (TSE Prime 7917, formerly Fujimori Kogyo) found on 14 September 2024 that some servers of its production management and core systems had been encrypted by ransomware, and posted a notice on its website on the 15th. The attacker demanded a ransom, which the company decided not to pay. Production and shipping were delayed, and work resumed on a backup system on 27 September. A 2 December update confirmed that some company and subsidiary data had leaked, and on 9 January 2025 it said data on 143,718 business partners and contacts and 13,485 officers, employees and family members (names, birth dates, addresses, basic pension numbers, My Number and more) may have leaked. Production and shipping are back to previous levels. The confirmed personal-data leak was the names and job titles of 38 officers/employees in an organization chart dated 1 October 2022; the larger cohorts remain at risk.