SHINDO2

OM Seisakusho

OM Ltd.

RansomwareSize not disclosed

POSSIBLE LEAKTrade secretsRecovering

Open in the live monitor ▶
Disclosed
Feb 28, 2025
Detected
Feb 24, 2025
Detection to disclosure
4 days
Leak
Leak possible
Type
Ransomware
Status
Recovering
Security spend
Not checked yet
Compensation
Not announced

What leaked

UnspecifiedPersonal data about business partners
Business dataConfidential information

Who is affected

  • Business partners of the company and its subsidiaries

Cause

The company's servers were breached and files were encrypted by ransomware

Timeline

  1. Early morning
  2. Date of the Security NEXT report

Response

  • Blocked the entry point
  • Forensic investigation

Isolated the affected servers from the network and is investigating and recovering with outside help

What you should do

  1. Check the company's notice to see if you're affected

Lessons for companies

  1. Offline backups with restore drills; segment the network
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources