> JapanHacked_
[Investigating][Severity: Major][Ransomware][Misconfiguration]

Betsudaikohsan: ransomware, with a threat to sell the data

On 25 October 2024 Betsudaikohsan, a real estate company in Oita Prefecture, disclosed a ransomware attack on its servers and related equipment. According to Nikkei xTECH, the servers became unusable around 7:40 on 24 October, and the screen said the attackers had copied data including personal data and would sell it to third parties unless paid. Its third report of 18 November said one way in may have been a misconfigured security device installed by a contractor, which has been fixed. Log analysis showed data may have been taken out, but only the amount is known; the kinds and number of personal records and the people affected may never be determined.

Disclosed

2024-10-25

Organizations involved

4

Leaked or at risk

Unknown

Downtime

Unknown

Timeline

  1. Detected 2024-10-24
  2. Disclosed 2024-10-25
  3. 1 days

Attack or cause

Method
[Ransomware][Misconfiguration]
Impact
[Service outage][Data leak][Extortion]
Entry point
Unknown

Data exposed or at risk

–

Supply chain

Organizations involved

Open in organization search

Sources

  1. [1][Official]ランサムウェア被害に伴う情報漏えいのおそれに関するお知らせ【第三報(24.11.18)】Betsudaikohsan · 2024-11-18
  2. [2][News]別大興産のランサムウエア被害、委託先のセキュリティー設定不備が原因かNikkei xTECH · 2024-12-03
  3. [3][Official]ランサムウェア被害に伴う情報漏えいのおそれに関するお知らせ【第一報(24.10.25)】Betsudaikohsan · 2024-10-25
  4. [4][News]大分市と竹田市の市営住宅も漏えいの対象に ~ 別大興産へのランサムウェア攻撃ScanNetSecurity · 2024-11-08