> JapanHacked_
[Investigating][Severity: Moderate][Ransomware]

Omnibus Japan: ransomware hit the Tohokushinsha group company, encrypting some files; publication of client information on a leak site was confirmed

Omnibus Japan, a Tohokushinsha group company, was hit by ransomware that encrypted some files, and client information was confirmed published on a leak site.

Disclosed

2025-12-17

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It confirmed a cyberattack using ransomware on part of its systems, which encrypted some files and made them inaccessible. It asked an external specialist to investigate and set up a joint task force with Tohokushinsha. [1]

  2. It announced the unauthorized access by ransomware (first report). [1]

  3. It published a second report. [1]

  4. It published the sixth report. The data was posted on the leak site, but no sign that files were taken out has been confirmed. [2]

Impact

ScanNetSecurity reported that publication of client information on a leak site was confirmed. [1]

Timeline

  1. Started 2025-12-09
  2. Disclosed 2025-12-17
  3. 8 days

Attack or cause

Method
[Ransomware]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]リークサイトで取引先情報の公開を確認 ~ 東北新社グループ会社にランサムウェア攻撃ScanNetSecurity · 2026-01-20 08:05
  2. [2][News]東北新社グループ会社のオムニバス・ジャパンにランサムウェア攻撃、リークサイトで公開されるもファイルが持ち出された形跡は確認されずScanNetSecurity · 2026-06-16 08:05