> JapanHacked_
[Contained][Severity: Major][Ransomware][Credential abuse]

Laurel Bank Machines: ransomware hit its AI-OCR service "Jijilla", and about 223,000 survey and record forms of clients of Nomura Research Institute, Hiroshima Bank, Keio University and others may have leaked through the outsourcing chain

Ransomware hit the AI-OCR service of a cash-handling machine maker, and form data of banks and a university, entered by a subcontractor, may have leaked.

Disclosed

2025-10-16

Organizations involved

6

Leaked or at risk

223K

223,000

Downtime

Unknown

What happened

  1. The server of the AI-OCR service "Jijilla" was hit by an attack with a ransom demand. Customers reported that the service was unavailable, and the company confirmed it. Files on the server were lost and some services stopped. [1]

  2. Laurel Bank Machines announced the unauthorized access and possible leak of personal data. [1] [2]

  3. Hiroshima Bank announced that the names of two of its customers had leaked through Nomura Research Institute and Aspect Core. [3]

  4. Keio University's Correspondence Education Division announced that information on its correspondence courses had leaked in the attack on Jijilla used by its contractor. [4]

  5. Persol Research Institute announced that data from work it had taken on from a client was affected, because Aspect Core, to which it outsourced data entry, used Jijilla. [5]

  6. Iyo Bank announced the unauthorized access to Jijilla, which a subcontractor of its contractor had used. [6]

  7. As a result of its forensic investigation, it announced that the data at risk covered about 223,000 forms, about 550,000 answer items. [1]

Impact

The data at risk is about 223,000 forms (about 550,000 items) of mostly unsigned survey answers processed with Jijilla, plus names and email addresses of 18 staff at client companies and 361 trial registrants. Nomura Research Institute processes survey data for several financial institutions, and its subcontractor Aspect Core used Jijilla, so the effect reached the institutions that had commissioned the work. [1] [2] [3]

At Hiroshima Bank the names of two customers were affected, and at Keio University information on its correspondence courses. Data from work Persol Research Institute took on from a client was also affected. [3] [4] [5]

Timeline

  1. Started, Detected 2025-09-25
  2. Disclosed 2025-10-16
  3. 21 days

Attack or cause

Method
[Ransomware][Credential abuse]
Impact
[Data leak][Extortion][Service outage]
Entry point
Supplier

Data exposed or at risk

[Name][E-mail address]

Supply chain

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによる個人情報漏えいに関するご報告とお詫びLaurel Bank Machines Co., Ltd. · 2026-01-09
  2. [2][News]AI-OCR サービス「Jijilla」サーバに不正アクセス、保管する個人情報の一部が外部に漏えいした可能性ScanNetSecurity · 2025-10-27 08:05
  3. [3][News]広島銀行のアンケート回答者の情報が漏えい ~ ローレルバンクマシンの入力補助ツールへの身代金要求を伴う不正アクセスScanNetSecurity · 2025-11-13 08:05
  4. [4][News]慶應義塾大学委託先が使用した入力補助ツール Jijilla に不正アクセス、通信教育課程に関する情報が流出ScanNetSecurity · 2025-11-26 08:05
  5. [5][News]パーソル総合研究所が受注した業務データも対象 ~ ローレルバンクマシン社の入力補助ツール「Jijilla」への身代金要求を伴う不正アクセスScanNetSecurity · 2025-12-08 08:05
  6. [6][News]伊予銀行の再委託先で使用していたローレルバンクマシン提供のクラウドサービスに身代金要求を伴う不正アクセスScanNetSecurity · 2025-12-08 08:05