> JapanHacked_
[Contained][Severity: Critical][Ransomware]

Runtec: ransomware via a VPN device encrypted more than 20 servers and caused major delays in its fresh delivery service

Intruders logged into its VPN device and encrypted more than 20 servers. The fresh delivery inspection system and others stopped and deliveries were delayed badly.

Disclosed

2025-04-23

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. A system failure occurred in the early morning and several services stopped. An investigation found that a third party had logged into the VPN device without authorization, accessed servers and encrypted system files. [1]

  2. Its fresh delivery service saw major delays. It reported the damage to the Fukuoka Prefectural Police. [1]

  3. It announced the incident. More than 20 servers were encrypted, including the fresh delivery inspection system and the web delivery status lookup. Inspection moved to paper, and it asked customers to limit volumes and accept longer lead times. It expected about three weeks to recover and suspended Sunday collection through May 25. [1] [2]

Impact

At the time of the announcement it had not confirmed any customer data leak or secondary damage. [1]

Timeline

  1. Started, Detected 2025-04-21
  2. Disclosed 2025-04-23
  3. 2 days

Attack or cause

Method
[Ransomware]
Impact
[Service outage]
Entry point
VPN device

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]ランサムウェア攻撃によるシステム障害に伴う混乱のお詫びと各種お願いについてRuntec Co., Ltd. · 2025-04-23
  2. [2][News]フレッシュ便集配で大幅な集配遅延 ～ ランテックにランサムウェア攻撃ScanNetSecurity · 2025-05-02 08:05