Gala Yuzawa: ransomware attack on the lift ticket system
At the Gala Yuzawa ski resort of the JR East group, the lift ticket system failed on 5 February and some servers were found hit by ransomware. The encrypted servers held names, addresses, phone numbers and face photos of up to 1,518 season pass buyers since December 2020. A security flaw in the settings of a router for remote access was the cause. No sign of data being taken was found. The system restarted on 7 February, except some functions.
Disclosed
2026-02-12
Organizations involved
1
Leaked or at risk
1.5K
1,518
Downtime
2 days
Timeline
- Detected 2026-02-05
- Disclosed 2026-02-12
- 7 days
Attack or cause
- Method
- [Ransomware][Misconfiguration]
- Impact
- [Data leak][Service outage]
- Entry point
- Remote access
Data exposed or at risk
Organizations involved
[Breached][Critical]Niigata, YuzawaPersonal services and entertainment1,518 leaked
Gala Yuzawa Co., Ltd.
Sources
- [1][Official]弊社サーバーへの不正アクセスによりお客さま情報が漏えいした可能性についてGala Yuzawa · 2026-02-12