> JapanHacked_
[Contained][Severity: Major][Ransomware][Credential abuse]

Nihon Shisan Souken: ransomware attack

On 9 May, Nihon Shisan Souken, a group company of Aoyama Zaisan Networks, found its servers infected with ransomware; files of the company and of its subsidiary Nitto Fudosan, which used the same servers, were encrypted. The investigation found a third party had stolen credentials by some means and entered its server environment. The fourth report on 11 September said customers' personal data had been published on the attacker's leak site as of 26 August: names, birth dates, addresses and property details of consulting and real estate customers, and names, birth dates, addresses and phone numbers of employees and their families. No impact was found on Aoyama Zaisan Networks itself or its other group companies.

Disclosed

2026-05-14

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

Timeline

  1. Detected 2026-05-09
  2. Disclosed 2026-05-14
  3. 5 days

Organizations involved

Open in organization search

Sources

  1. [1][Official]セキュリティインシデントの発生に関するご報告(第4報)Nihon Shisan Souken · 2026-09-11
  2. [2][Official]当社グループ会社におけるセキュリティインシデントの発生に関するご報告(第3報)Aoyama Zaisan Networks · 2026-07-31