> JapanHacked_
[Contained][Severity: Major][Ransomware][Credential abuse]

Naniwa Pump Mfg.: ransomware through stolen credentials; employee data may have leaked

On 11 December 2024 the pump maker Naniwa Pump Mfg. disclosed a possible personal data leak from a ransomware attack. From 10 to 14 September a third party accessed its servers with illicitly obtained credentials, ran ransomware and encrypted files. It came to light on 13 September through a report from the Osaka Prefectural Police. Employees' names, company names, birth dates, gender, addresses, work phone numbers and work email addresses may have leaked. Systems affecting operations have been restored.

Disclosed

2024-12-11

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

Timeline

  1. Started 2024-09-10
  2. Detected 2024-09-13
  3. Disclosed 2024-12-11
  4. 92 days

Organizations involved

Open in organization search

Sources

  1. [1][Official]【重要なお知らせ】ランサムウェア攻撃による個人情報漏えいの可能性について(2024年12月11日)Naniwa Pump Mfg. · 2024-12-11