Kanagawa Sewerage Public Corporation: BlackSuit ransomware on servers and PCs; personal data may have leaked
Kanagawa Prefecture announced on 10 October 2024 that the network system of the Kanagawa Sewerage Public Corporation, a prefecture-led third-sector body, had been infected and personal data may have leaked. At about 2:00 on 9 October a staff member at the Yanagishima water reclamation center noticed a PC fault, and the maintenance contractor confirmed at about 17:00 that a server and two PCs were infected with the BlackSuit ransomware. The server may have held school names and children's names from a calligraphy and painting contest, names and phone numbers of plant tour applicants, names, addresses, phone numbers and email addresses of event performers and exhibitors, and staff hiring and HR data. Sewage treatment plants kept running normally.
Disclosed
2024-10-10
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Detected 2024-10-09
- Disclosed 2024-10-10
- 1 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak]
- Entry point
- Unknown
- Actor
- BlackSuit Ransomware group · Attributed
Data exposed or at risk
Organizations involved
[Breached][Major]Kanagawa, HiratsukaElectricity, gas, heat and water
Kanagawa Sewerage Public Corporation
Sources
- [1][Official]神奈川県下水道公社内部のネットワークシステムのウイルス感染による個人情報流出の可能性についてKanagawa Prefecture · 2024-10-10