Mino Industry: ransomware attack
Between October 1 and 4, attackers abused an undeleted VPN account with weak credentials and encrypted servers and some PCs. The final report attributed the attack to SafePay and confirmed publication of about 60 GB including business-partner information. Recovery and safety checks were reported on December 25. A February 2026 notice identified potential exposure of current and former employees' information, including health data, while stating that public disclosure of personal information had not been confirmed.
Disclosed
2025-10-04
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Started 2025-10-01
- Detected, Disclosed 2025-10-04
- Resolved 2025-12-25
- 85 days
Attack or cause
- Method
- [Ransomware][Credential abuse]
- Impact
- [Data leak][Service outage][Extortion]
- Entry point
- Stolen credentials
- Actor
- SafePay Ransomware group · Attributed
Data exposed or at risk
Organizations involved
[Breached][Critical]Gifu, NakatsugawaManufacturing
Mino Industry Co., Ltd.
Sources
- [1][Official]サイバー攻撃によるシステム障害について(第一報)Mino Industry · 2025-10-04
- [2][Official]サイバー攻撃によるシステム障害について(第四報)Mino Industry · 2025-11-03
- [3][Official]サイバー攻撃に関する最終報告 兼 安全宣言Mino Industry Co., Ltd. · 2025-12-25
- [4][Official]【重要なお知らせ】個人情報漏えいの可能性に関するご報告Mino Industry Co., Ltd. · 2026-02-19