SHINDO4
Nippo Valve
Nippo Valve Co., Ltd.
Employees343people
LEAK CONFIRMEDHealth / medical / treatment / Postal addressRansomware · Recovering
Open in the live monitor ▶- Disclosed
- Mar 31, 2025
- Detected
- Mar 18, 2025
- Detection to disclosure
- 13 days
- Leak
- Leak confirmed
- Type
- Ransomware
- Status
- Recovering
- Security spend
- Not checked yet
- Compensation
- Not announced
What leaked
IdentityFull name, Date of birth, Gender
ContactAddress, Phone number, Email address
Special-care dataHealth checkup results
Business dataSales summaries, meeting materials, internal review documents and other data
How many
- Employees 343 people
Who is affected
- Company employees
Cause
Ransomware encrypted server data. Firewall vulnerabilities and outdated anti-malware software allowed the breach
Timeline
- Detected
- Date of the first Security NEXT report
- Reported to authority
- Company issued an update
What you should do
- Health data can't be taken back. Don't answer blackmail; call the police (#9110) or the consumer hotline (188)
- Don't open links in emails from this company. The apology email itself may be fake
- Treat refund or apology calls and texts as scams. Call back only on the number from the official site
- Watch for unexpected mail or invoices; your address is hard to change
- Expect targeted phishing posing as HR or interview contacts
- Check the company's notice to see if you're affected
Lessons for companies
- Patch internet-facing servers, VPNs and admin panels first. Exploits follow disclosure within days
- Offline backups with restore drills; segment the network
- Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
- Run red teaming and AI-assisted hardening, and publish how much you invest
Sources
- Security NEXT News · Mar 31, 2025
- Security NEXT News · May 21, 2025