Denis Japan: ransomware hit group servers, and HR and health data of former employees and partner contacts may have been viewed

1. 2024-01-16

   It confirmed that a third party had accessed the network the group manages. Information on some servers was compromised and data in applications and file servers was encrypted by ransomware and became inaccessible. It cut the affected devices off from the unaffected parts. [1]

2. 2024-12-04

   It issued a notice. It said no leak outside had been confirmed but that it could not rule out that the attacker viewed data, and that personal data of outside partners and former employees may also have been affected. [1] [2]

The data that may have been affected is phone numbers, email addresses, affiliations and transaction details of partner contacts, and for former employees names, birth dates, addresses, genders, phone numbers, email addresses, face photos, qualifications, social insurance numbers, tax deductions, family details, health data such as checkup results, work and pay data, and payment accounts. It knows of no secondary harm. [1]