Uchicomi: ransomware puts 142,591 member accounts at risk

A server failure on 6 July prompted investigation and system isolation. Specialists subsequently found that an intruder had encrypted and stolen some files. On 4 November the company disclosed the ransomware attack and possible member-data exposure. [1]

Up to 142,591 accounts are at risk. Names, email addresses, birth dates, gender, addresses and phone numbers may have been viewed or acquired; available fields differ by member. This does not establish that every field for every member was taken. No card data is held. Passwords are stored encrypted and are not listed among the exposed fields. [1]

It informed police and the PPC and is reviewing monitoring, access controls and server safety. At disclosure it had found no misuse, secondary harm or online publication. It recommends changing passwords reused on other services. [1]