Sanshodo: ransomware attack

An intrusion and ransomware were identified early on May 15, prompting server shutdowns and network isolation. Ordering and logistics were affected. The May 22 update described gradual recovery and continued investigation of personal data, with no confirmed external leakage or published count or fields. The June 13 findings confirmed compromised accounts and encryption but no direct traces of customer or partner data exfiltration. Affected servers were disconnected and backups restored in a separate operational environment.