CKC Network and Gakusan: ransomware attack on the inquiry system
On 2 May, CKC Network and Gakusan, which run cram schools and home tutoring, found a ransomware attack on the server of the inquiry management system they operate together and shut it down. The second report on 10 June said a vulnerability in server management software was exploited. The server held about 664,000 inquiry records (names and school years; about 9,900 may include phone numbers, addresses or emails) and about 53,000 member records (member numbers and family names). No sign of data being taken was found.
Disclosed
2026-05-15
Organizations involved
2
Leaked or at risk
664K
664,000
Downtime
Unknown
Timeline
- Detected 2026-05-02
- Disclosed 2026-05-15
- 13 days
Attack or cause
- Method
- [Ransomware][Web app exploit]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Critical]Aichi, Nagoya, NakaEducation and learning support664,000 leaked
CKC Network Inc.[Breached][Critical]Aichi, Nagoya, MeitoEducation and learning support
Gakusan Inc.
Sources
- [1][News]サーバ管理ソフトウェアの脆弱性を悪用 ~ CKCネットワークと学参が運用するシステムにランサムウェア攻撃ScanNetSecurity · 2026-06-22
- [2][Official]【第二報】ランサムウェア被害 調査結果のご報告と今後の対応についてCKC Network and Gakusan · 2026-06-10