Nihon Shisan Souken: ransomware attack
On 9 May, Nihon Shisan Souken, a group company of Aoyama Zaisan Networks, found its servers infected with ransomware; files of the company and of its subsidiary Nitto Fudosan, which used the same servers, were encrypted. The investigation found a third party had stolen credentials by some means and entered its server environment. The fourth report on 11 September said customers' personal data had been published on the attacker's leak site as of 26 August: names, birth dates, addresses and property details of consulting and real estate customers, and names, birth dates, addresses and phone numbers of employees and their families. No impact was found on Aoyama Zaisan Networks itself or its other group companies.
Disclosed
2026-05-14
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Detected 2026-05-09
- Disclosed 2026-05-14
- 5 days
Attack or cause
- Method
- [Ransomware][Credential abuse]
- Impact
- [Data leak][Service outage][Extortion]
- Entry point
- Stolen credentials
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, ChiyodaReal estate and rental
Nihon Shisan Souken Inc.Includes its subsidiary Nitto Fudosan, which used the same servers.
Sources
- [1][Official]セキュリティインシデントの発生に関するご報告(第4報)Nihon Shisan Souken · 2026-09-11
- [2][Official]当社グループ会社におけるセキュリティインシデントの発生に関するご報告(第3報)Aoyama Zaisan Networks · 2026-07-31