SHINDO4

Nippon Ceramic

Personal data~37,600people

LEAK CONFIRMEDPhone number / Trade secretsRansomware · Investigating

Open in the live monitor ▶
Disclosed
Apr 8, 2025
Detected
Apr 7, 2025
Detection to disclosure
1 day
Leak
Leak confirmed
Type
Ransomware
Status
Investigating
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityFull name
Business dataCompany name, Traded product information and transaction volumes
Employment & HRDepartment, Job title
ContactPhone number, Email address

How many

  • People whose data may have leaked (business partners, shareholders, employees, job applicants and others) ~37,600 people
  • People whose data was confirmed leaked (business partner contacts and employees) ~900 people
  • Business partners whose company and product transaction data leaked ~350 organizations
  • Business partners whose information may have leaked ~1,500 organizations

Who is affected

  • Business partner contacts
  • Company employees
  • Job applicants
  • Shareholders

Cause

The company's servers were hit by ransomware

Timeline

  1. Intrusion began
  2. Detected
  3. First disclosure
  4. Company issued an update

Response

  • Blocked the entry point
  • Forensic investigation
  • Notified individuals

Disconnected the network for safety. Continuing the investigation with outside support and contacting affected people

What you should do

  1. Don't open links in emails from this company. The apology email itself may be fake
  2. Treat refund or apology calls and texts as scams. Call back only on the number from the official site
  3. Expect targeted phishing posing as HR or interview contacts
  4. Check the company's notice to see if you're affected

Lessons for companies

  1. Offline backups with restore drills; segment the network
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources