SHINDO2
Matsuzawa Shoten
RansomwareSize not disclosed
LEAK UNCLEARRecovering
Open in the live monitor ▶- Disclosed
- May 18, 2026
- Leak
- Unknown
- Type
- Ransomware
- Status
- Recovering
- Security spend
- Not checked yet
- Compensation
- Not announced
What leaked
UnspecifiedWhether any data leaked was unknown at announcement
Who is affected
- Client bookstores and others (details unknown)
Cause
Ransomware infection through unauthorized outside access; route not disclosed
Timeline
- Server intrusion and ransomware infection detected
- First disclosure
- Ordering on Gakufu Navi partly resumed
Response
- Blocked the entry point
- Password reset
- Forensic investigation
- BCP review
Isolated infected servers and devices, rebuilt servers and changed passwords; investigating with outside experts; resumed in stages with temporary email ordering
What you should do
- Check the company's notice to see if you're affected
Lessons for companies
- Offline backups with restore drills; segment the network
- Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
- Run red teaming and AI-assisted hardening, and publish how much you invest
Sources
- Security Measures Lab Researcher · May 18, 2026