Omnibus Japan: ransomware hit the Tohokushinsha group company, encrypting some files; publication of client information on a leak site was confirmed
Omnibus Japan, a Tohokushinsha group company, was hit by ransomware that encrypted some files, and client information was confirmed published on a leak site.
Disclosed
2025-12-17
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It confirmed a cyberattack using ransomware on part of its systems, which encrypted some files and made them inaccessible. It asked an external specialist to investigate and set up a joint task force with Tohokushinsha. [1]
It announced the unauthorized access by ransomware (first report). [1]
It published a second report. [1]
It published the sixth report. The data was posted on the leak site, but no sign that files were taken out has been confirmed. [2]
Impact
ScanNetSecurity reported that publication of client information on a leak site was confirmed. [1]
Timeline
- Started 2025-12-09
- Disclosed 2025-12-17
- 8 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Moderate]Tokyo, Minato-kuInformation and communications
Omnibus Japan Inc.
Sources
- [1][News]リークサイトで取引先情報の公開を確認 ~ 東北新社グループ会社にランサムウェア攻撃ScanNetSecurity · 2026-01-20 08:05
- [2][News]東北新社グループ会社のオムニバス・ジャパンにランサムウェア攻撃、リークサイトで公開されるもファイルが持ち出された形跡は確認されずScanNetSecurity · 2026-06-16 08:05