Naniwa Pump Mfg.: ransomware through stolen credentials; employee data may have leaked
On 11 December 2024 the pump maker Naniwa Pump Mfg. disclosed a possible personal data leak from a ransomware attack. From 10 to 14 September a third party accessed its servers with illicitly obtained credentials, ran ransomware and encrypted files. It came to light on 13 September through a report from the Osaka Prefectural Police. Employees' names, company names, birth dates, gender, addresses, work phone numbers and work email addresses may have leaked. Systems affecting operations have been restored.
Disclosed
2024-12-11
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Started 2024-09-10
- Detected 2024-09-13
- Disclosed 2024-12-11
- 92 days
Attack or cause
- Method
- [Ransomware][Credential abuse]
- Impact
- [Data leak][Service outage]
- Entry point
- Stolen credentials
Data exposed or at risk
Organizations involved
[Breached][Major]Osaka, Osaka, NishiManufacturing
Naniwa Pump Mfg. Co., Ltd.
Sources
- [1][Official]【重要なお知らせ】ランサムウェア攻撃による個人情報漏えいの可能性について(2024年12月11日)Naniwa Pump Mfg. · 2024-12-11