> JapanHacked_
[Resolved][Severity: Critical][Ransomware][Credential abuse]

Mino Industry: ransomware attack

Between October 1 and 4, attackers abused an undeleted VPN account with weak credentials and encrypted servers and some PCs. The final report attributed the attack to SafePay and confirmed publication of about 60 GB including business-partner information. Recovery and safety checks were reported on December 25. A February 2026 notice identified potential exposure of current and former employees' information, including health data, while stating that public disclosure of personal information had not been confirmed.

Disclosed

2025-10-04

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

Timeline

  1. Started 2025-10-01
  2. Detected, Disclosed 2025-10-04
  3. Resolved 2025-12-25
  4. 85 days

Attack or cause

Method
[Ransomware][Credential abuse]
Impact
[Data leak][Service outage][Extortion]
Entry point
Stolen credentials
Actor
SafePay Ransomware group · Attributed

Data exposed or at risk

[Name][Gender][Date of birth][Postal address][E-mail address][Employment][Health data]

Organizations involved

Open in organization search

Sources

  1. [1][Official]サイバー攻撃によるシステム障害について(第一報)Mino Industry · 2025-10-04
  2. [2][Official]サイバー攻撃によるシステム障害について(第四報)Mino Industry · 2025-11-03
  3. [3][Official]サイバー攻撃に関する最終報告 兼 安全宣言Mino Industry Co., Ltd. · 2025-12-25
  4. [4][Official]【重要なお知らせ】個人情報漏えいの可能性に関するご報告Mino Industry Co., Ltd. · 2026-02-19