Saizeriya: ransomware exposes about 60,000 records of staff and business partners
On 16 October 2024 the Italian restaurant chain Saizeriya announced that its servers had been hit by ransomware and that some personal and confidential data had very likely leaked. System failures on several servers stopped some services, and isolating the affected servers left some important internal systems unusable. Card and point card data used by customers in its restaurants was not involved. According to ITmedia, the failures began on 5 October and the attack was confirmed on the 13th. On 10 December the company said 2,234 records of business partners and other contacts (names, addresses, email addresses, phone numbers and more) and 58,853 records of current and former employees and their families (names, addresses, birth dates, phone numbers, email addresses and more) had leaked or may have leaked. No customer data leaked.
Disclosed
2024-10-16
Organizations involved
1
Leaked or at risk
58.9K
58,853
Downtime
Unknown
Timeline
- Detected 2024-10-05
- Disclosed 2024-10-16
- 11 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak][Service outage]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Saitama, YoshikawaAccommodation, food and drink58,853 leaked
Saizeriya Co., Ltd.
Sources
- [1][Official]当社におけるランサムウェア被害に伴う サービスの一部停止と情報漏えいに関するお知らせSaizeriya · 2024-10-16
- [2][News]サイゼリヤ、個人情報6万件超漏えいか 10月のランサムウェア攻撃でITmedia NEWS · 2024-12-10
- [3][News]サイゼリヤ、不正アクセス被害で取引先や従業員らの個人情報約6万件の漏えいが判明INTERNET Watch · 2024-12-11