> JapanHacked_
[Contained][Severity: Moderate][Ransomware][Misconfiguration][Credential abuse]

Kyocera Communication Systems: ransomware hits Ikaruga town library's new system just before launch through flawed access settings

On 2 October 2024 Kyocera Communication Systems (KCCS), which was building the town library system for Ikaruga, Nara, disclosed that a newly built server had been infected with ransomware. A server connection error on 30 September revealed it, and the 1 October launch was postponed. The server held personal data of 21,994 library users. The town's final report on 25 October said access settings on the server under construction were flawed, letting outsiders work out the login ID and password and get in. A forensic investigation found no traces of data being taken out, and the new system was scheduled to go live on 1 November.

Disclosed

2024-10-02

Organizations involved

2

Leaked or at risk

22K

21,994

Downtime

Unknown

Timeline

  1. Detected 2024-09-30
  2. Disclosed 2024-10-02
  3. 2 days

Attack or cause

Method
[Ransomware][Misconfiguration][Credential abuse]
Impact
[Service outage]
Entry point
Unknown

Data exposed or at risk

–

Supply chain

Kyocera Communication Systems Co., Ltd.

[Breached]

Organizations listed on this site
2

Organizations involved

Open in organization search

Sources

  1. [1][Official]【重要なお知らせ】システムの導入作業中のランサムウェア感染に関するご報告Kyocera Communication Systems · 2024-10-02
  2. [2][Official]斑鳩町立図書館システム構築業務におけるコンピュータウィルス感染発生事案について（第1報）Ikaruga Town · 2024-10-03
  3. [3][Official]図書館システム構築業務におけるコンピュータウィルス感染発生事案について（最終報）Ikaruga Town · 2024-10-25