Yorozu: ransomware halts core systems and delays its earnings report

On 18 October 2024 the auto suspension parts maker Yorozu (TSE Prime 7294, Kohoku, Yokohama) disclosed a ransomware attack. On the morning of 14 October it found that files on several group servers were encrypted and inaccessible. Its 11 November disclosure said the damage was widespread, including core systems; shutting down all servers and networks left internal systems unusable, and it postponed its second-quarter earnings announcement. Records of data being sent out from a file server were found, and it is investigating a possible personal data leak.