YCC Information System: ransomware attack

Early on 2 April, files on a file server at YCC Information System, an IT company in Yamagata City, were encrypted and a ransom note was found. The fifth report on 20 May said credentials of a network device administrator account were guessed or obtained and used to enter the internal network. The server held data entrusted by clients; there was no clear sign of data being sent out, but access could not be ruled out. Clients including Yamagata City, Yamagata Prefecture, Yamagata University, Yamagata Kotsu, Shonai and Takahata disclosed their impact, and Nikkei xTECH counted over a million records in total.