Akatake Engineering: ransomware encrypted files on its servers; data of about 11,700 employees and business contacts may have leaked

1. 2026-08-10

   Some files on the servers were found encrypted and unusable. The attacker is thought to have obtained admin rights somehow and used them to spread the ransomware. [1]

2. 2026-08-13

   First report. [1]

3. 2026-10-13

   The outside investigation finished, and the final report was issued. [1]

There is no clear trace of data being sent out, but several traces mean theft cannot be ruled out. [1]

• 125 employees: names, addresses, birth dates, gender, phone numbers, email addresses and My Number (stored encrypted) [1]
• 11,587 business contacts: names, phone numbers and email addresses [1]

All servers and devices were cut off from the network and every employee's password changed. The file server was restored from backups. The police and the Personal Information Protection Commission were told, and the dark web is being watched for the data. Multi-factor authentication, a move of the servers to the cloud and offsite log storage are planned. [1]