Tombow Beverage: ransomware attack
Some servers at Tombow Beverage, a drinks maker in Toyama, were hit by ransomware on 15 January. The company confirmed that part of the suppliers' bank account data registered in its accounting software was taken; customer data was not included. Procurement, production and payments were not affected. Its March 2 final report identified remote desktop software as the entry route and said all PCs and servers had been examined and their safety confirmed. How that software was installed remained under investigation.
Disclosed
2026-01-20
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Started 2026-01-15
- Disclosed 2026-01-20
- 5 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak]
- Entry point
- Remote access
Data exposed or at risk
Organizations involved
[Breached][Critical]Toyama, ToyamaManufacturing
Tombow Beverage Co., Ltd.
Sources
- [1][Official]ランサムウェアによる不正アクセスに関するご報告とお詫びTombow Beverage · 2026-01-20
- [2][Official]ランサムウェアによる不正アクセスに関するご報告とお詫び(最終報)Tombow Beverage · 2026-03-02