> JapanHacked_
[Investigating][Severity: Major][Ransomware]

Koka City: ransomware on its voice broadcast server; names of terminal owners may have leaked

Ransomware hit the city’s voice broadcast server, leaving home terminals and outdoor speakers unusable. Names or business names of about 25,000 terminal owners may have leaked.

Disclosed

2026-11-12

Organizations involved

1

Leaked or at risk

25K

25,000

Downtime

Unknown

What happened

Koka City said on 12 November that ransomware hit the server of its voice broadcast system, which reaches homes and businesses through terminals and outdoor speakers, and that both are unusable. Names or business names of terminal owners may have leaked and are being checked. The Chunichi Shimbun reported that the system stopped early on 11 November, the national J-Alert test broadcast at 11:00 was cancelled, and ransomware was found at 18:45. About 25,000 records are involved; a local cable TV company maintains the server under contract. The prefectural police are investigating. [1] [2]

Emergency alerts, paging broadcasts, obituary notices and the scheduled melody broadcasts are also stopped, with no recovery date. Emergency information goes out through the city’s LINE account, emergency email, TV, radio and the Shiga disaster app. [1]

Timeline

  1. Detected 2026-11-11
  2. Disclosed 2026-11-12
  3. 1 days

Attack or cause

Method
[Ransomware]
Impact
[Data leak][Service outage]
Entry point
Unknown

Data exposed or at risk

[Name]

Organizations involved

Sources

  1. [1][Official]地域情報基盤施設(音声放送システム)への不正アクセスについてKoka City
  2. [2][News]滋賀県甲賀市に不正アクセス、個人情報など2万5千件流出か 音声放送システムのサーバーが被害Chunichi Shimbun · 2026-11-12