Sanrio Entertainment: ransomware attack
A ransomware attack on 21 January 2025 disrupted Sanrio Puroland reservations, ticket purchases and other services. The company identified entry through remote-access equipment and on 7 February reported possible exposure of up to about two million personal and confidential records. Its final report on 12 August said system restoration was complete as of 1 August and no information leakage had been confirmed. It said the ransomware damage had not spread to parent company Sanrio.
Disclosed
2025-01-22
Organizations involved
1
Leaked or at risk
2M
2,000,000
Downtime
Unknown
Timeline
- Started 2025-01-21
- Disclosed 2025-01-22
- Resolved 2025-08-01
- 192 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak][Service outage]
- Entry point
- Remote access
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, TamaPersonal services and entertainment2,000,000 leaked
Sanrio Entertainment Co., Ltd.
Sources
- [1][Official]当社への不正アクセスならびに情報漏洩の可能性に関する調査結果のご報告(過去のお知らせを含む)Sanrio Entertainment · 2025-08-12