MTI: ransomware through stolen credentials; staff and partner data may have leaked

MTI (Chiyoda, Tokyo), the NYK group company that does technical research for shipping, disclosed on 21 October 2024 that its servers had been accessed without authorization and personal data of staff at MTI and its business partners may have leaked in a ransomware attack. On the night of 25 August it found files on a server encrypted and inaccessible. An investigation found that a third party who had stolen credentials in some way accessed the servers between 22 and 25 August and ran ransomware. Affected are names, birth dates, genders, addresses, phone numbers, email addresses, bank account details, education, work history and sensitive personal data of its employees (including former employees and job applicants), and names, birth dates, addresses and more of partner staff. Its business was not affected, and it is not connected to the NYK group network.