SHINDO2

Junkosha

Junkosha Inc.

RansomwareSize not disclosed

POSSIBLE LEAKRecovering

Open in the live monitor ▶
Disclosed
Mar 27, 2025
Leak
Leak possible
Type
Ransomware
Status
Recovering
Security spend
Not checked yet
Compensation
Not announced

What leaked

UnspecifiedPersonal data of employees and customer information

Who is affected

  • Company employees
  • Customers

Cause

Attacked from outside via a network device, and data on servers was encrypted. Traces of compromise were found on the internal network and on a cloud file-management tool

Timeline

  1. Intrusion began
  2. Earliest report seen (Security NEXT); an earlier first notice may exist

Response

  • Password reset
  • More monitoring
  • Notified individuals

Changed passwords on servers and devices and strengthened security measures and monitoring. Contacting affected customers and other parties

What you should do

  1. Expect targeted phishing posing as HR or interview contacts
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Patch internet-facing servers, VPNs and admin panels first. Exploits follow disclosure within days
  2. Offline backups with restore drills; segment the network
  3. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  4. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources