> JapanHacked_
[Contained][Severity: Critical][Ransomware][Web app exploit]

CKC Network and Gakusan: ransomware attack on the inquiry system

On 2 May, CKC Network and Gakusan, which run cram schools and home tutoring, found a ransomware attack on the server of the inquiry management system they operate together and shut it down. The second report on 10 June said a vulnerability in server management software was exploited. The server held about 664,000 inquiry records (names and school years; about 9,900 may include phone numbers, addresses or emails) and about 53,000 member records (member numbers and family names). No sign of data being taken was found.

Disclosed

2026-05-15

Organizations involved

2

Leaked or at risk

664K

664,000

Downtime

Unknown

Timeline

  1. Detected 2026-05-02
  2. Disclosed 2026-05-15
  3. 13 days

Organizations involved

Open in organization search

Sources

  1. [1][News]サーバ管理ソフトウェアの脆弱性を悪用 ~ CKCネットワークと学参が運用するシステムにランサムウェア攻撃ScanNetSecurity · 2026-06-22
  2. [2][Official]【第二報】ランサムウェア被害 調査結果のご報告と今後の対応についてCKC Network and Gakusan · 2026-06-10