Portus: ransomware attack
Portus, an IT company in Kushiro, found ransomware on its internal servers early on 29 August and disclosed it on 31 August. Its third report on 14 October said leaks of information including personal data could not be fully ruled out. Kushiro City, which had contracted it to manage pupils' learning devices, said on 15 October that 31,233 learning account records of pupils and staff at its elementary and junior high schools (school names, names, account names and passwords) and admin passwords for network equipment at all 39 schools may have leaked.
Disclosed
2026-08-31
Organizations involved
2
Leaked or at risk
31.2K
31,233
Downtime
Unknown
Timeline
- Detected 2026-08-29
- Disclosed 2026-08-31
- 2 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Supply chain
Organizations involved
[Through a supplier][Critical]Hokkaido, KushiroMunicipality31,233 leaked
Kushiro City[Breached][Critical]Hokkaido, KushiroInformation and communications
Portus Corporation
Sources
- [1][Official]当社サーバーへの不正アクセスによる情報漏えいの可能性に関するお知らせとお詫び(第3報)Portus · 2026-10-14
- [2][News]児童らの個人情報流出か、委託業者に不正アクセス 北海道・釧路The Mainichi Shimbun · 2026-10-16
- [3][Official]学習用アカウント情報等の漏えいの可能性についてKushiro City · 2026-10-15