Marutake: ransomware attack

On 27 April, part of the servers at Marutake, a pharmaceutical wholesaler supplying medical institutions in Niigata, Tohoku and Kanto, went down; the third report on 8 May confirmed ransomware. The fourth report on 24 June said the attacker reached the servers with account details it had created without authorization by some means. Some data on the servers about business partners, shareholders, and officers and staff of the company and its affiliates was encrypted, taken and posted on the attacker's leak site. Its 334 client PCs showed no sign of intrusion or malware. It keeps supplying medicines on a temporary server environment.