Koka City: ransomware on its voice broadcast server; names of terminal owners may have leaked
Ransomware hit the city’s voice broadcast server, leaving home terminals and outdoor speakers unusable. Names or business names of about 25,000 terminal owners may have leaked.
Disclosed
2026-11-12
Organizations involved
1
Leaked or at risk
25K
25,000
Downtime
Unknown
What happened
Koka City said on 12 November that ransomware hit the server of its voice broadcast system, which reaches homes and businesses through terminals and outdoor speakers, and that both are unusable. Names or business names of terminal owners may have leaked and are being checked. The Chunichi Shimbun reported that the system stopped early on 11 November, the national J-Alert test broadcast at 11:00 was cancelled, and ransomware was found at 18:45. About 25,000 records are involved; a local cable TV company maintains the server under contract. The prefectural police are investigating. [1] [2]
Emergency alerts, paging broadcasts, obituary notices and the scheduled melody broadcasts are also stopped, with no recovery date. Emergency information goes out through the city’s LINE account, emergency email, TV, radio and the Shiga disaster app. [1]
Timeline
- Detected 2026-11-11
- Disclosed 2026-11-12
- 1 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak][Service outage]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Shiga, KokaMunicipality25,000 leaked
Koka City
Sources
- [1][Official]地域情報基盤施設(音声放送システム)への不正アクセスについてKoka City
- [2][News]滋賀県甲賀市に不正アクセス、個人情報など2万5千件流出か 音声放送システムのサーバーが被害Chunichi Shimbun · 2026-11-12