> JapanHacked_
[Investigating][Severity: Critical][Ransomware][Misconfiguration]

Gala Yuzawa: ransomware attack on the lift ticket system

At the Gala Yuzawa ski resort of the JR East group, the lift ticket system failed on 5 February and some servers were found hit by ransomware. The encrypted servers held names, addresses, phone numbers and face photos of up to 1,518 season pass buyers since December 2020. A security flaw in the settings of a router for remote access was the cause. No sign of data being taken was found. The system restarted on 7 February, except some functions.

Disclosed

2026-02-12

Organizations involved

1

Leaked or at risk

1.5K

1,518

Downtime

2 days

Timeline

  1. Detected 2026-02-05
  2. Disclosed 2026-02-12
  3. 7 days

Organizations involved

Open in organization search

Sources

  1. [1][Official]弊社サーバーへの不正アクセスによりお客さま情報が漏えいした可能性についてGala Yuzawa · 2026-02-12