Like Kids: ransomware; about 158,000 personal data records may have been viewed

On 1 October 2024 Like Kids (Shibuya, Tokyo), which runs nursery schools and after-school clubs, disclosed a ransomware attack on its servers. A system failure occurred early on 30 September and several servers were found encrypted. Its third report on 29 November said the attacker got in by exploiting a vulnerability at its internet gateway. The encrypted servers held 158,410 personal data records of children, parents, employees, outside instructors and others; they may have been viewed, but no signs of the data being taken out were found. Municipalities that outsource facilities to the company, including Meguro, Shinagawa, Hino, Yokosuka and Funabashi, informed their users.