Betsudaikohsan: ransomware, with a threat to sell the data
On 25 October 2024 Betsudaikohsan, a real estate company in Oita Prefecture, disclosed a ransomware attack on its servers and related equipment. According to Nikkei xTECH, the servers became unusable around 7:40 on 24 October, and the screen said the attackers had copied data including personal data and would sell it to third parties unless paid. Its third report of 18 November said one way in may have been a misconfigured security device installed by a contractor, which has been fixed. Log analysis showed data may have been taken out, but only the amount is known; the kinds and number of personal records and the people affected may never be determined.
Disclosed
2024-10-25
Organizations involved
4
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Detected 2024-10-24
- Disclosed 2024-10-25
- 1 days
Attack or cause
- Method
- [Ransomware][Misconfiguration]
- Impact
- [Service outage][Data leak][Extortion]
- Entry point
- Unknown
Data exposed or at risk
–
Supply chain
- Organizations listed on this site
- 4
Organizations involved
[Through a supplier][Major]Oita, OitaPrefecture
Oita Prefectural GovernmentBetsudai Kohsan said data of tenants, former tenants and applicants of the prefectural housing it manages may have leaked.
[Through a supplier][Major]Oita, OitaMunicipality
Oita CityWas told by Betsudai Kohsan, the designated manager of its municipal housing, that data of tenants, former tenants and applicants may have leaked.
[Breached][Major]Oita, BeppuReal estate and rental
Betsudaikohsan Co., Ltd.[Through a supplier][Major]Oita, TaketaMunicipality
Taketa CityBetsudai Kohsan said data of tenants, former tenants and applicants of the municipal housing it manages may have leaked.
Sources
- [1][Official]ランサムウェア被害に伴う情報漏えいのおそれに関するお知らせ【第三報(24.11.18)】Betsudaikohsan · 2024-11-18
- [2][News]別大興産のランサムウエア被害、委託先のセキュリティー設定不備が原因かNikkei xTECH · 2024-12-03
- [3][Official]ランサムウェア被害に伴う情報漏えいのおそれに関するお知らせ【第一報(24.10.25)】Betsudaikohsan · 2024-10-25
- [4][News]大分市と竹田市の市営住宅も漏えいの対象に ~ 別大興産へのランサムウェア攻撃ScanNetSecurity · 2024-11-08