Omikenshi: ransomware attack

An outage detected March 16 was disclosed March 23. The July final report confirmed VPN entry using stolen credentials and data transfer to external cloud storage, but could not identify the files or confirm business-partner data leakage. Attackers listed the company, while publication of actual data was not found. Entry-route remediation and recovery were completed and business continued.