CANVASs: ransomware attack on its licensing server
At CANVASs, which sells subtitling software, the server behind the My Page site for licences and tickets was hit by ransomware early on 6 January, encrypting configuration files and database backups. My Page was unavailable and tickets were sold by hand. The server was restored on 14 January. The report of 29 January said the attackers most likely exploited a vulnerability in the framework the system used; data being sent out was very unlikely but could not be ruled out, so the company notified the Personal Information Protection Commission. No ransom was paid.
Disclosed
2026-01-06
Organizations involved
1
Leaked or at risk
Unknown
Downtime
8 days
Timeline
- Started, Disclosed 2026-01-06
- Resolved 2026-01-14
- 8 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Service outage]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Major]Tokyo, ChiyodaInformation and communications
CANVASs Co., Ltd.
Sources
- [1][Official]当社へのランサムウェア攻撃に関するご報告CANVASs · 2026-01-06
- [2][Official]弊社サーバへのランサムウェア攻撃に関する調査結果と今後の対応についてCANVASs · 2026-01-29