Ransomware Attack Disables JBA Website and Destroys Data

Summary
JBA said a ransomware attack took its servers offline and damaged data. Its chair said backups were stored in the same cloud as the original data, making restoration impossible; member and credit-card data were reportedly not exposed.
Key points
- JBA said the attack occurred around 3:40 a.m. on the 7th, taking its servers offline and damaging data.
- The organization said records could not be searched and that it planned to launch a new website.
- JBA chair Shinji Shimada said the contractor stored data and backups in the same cloud, leaving no copy from which to restore the original data.
- Member and credit-card information was reportedly not leaked.
- Shimada acknowledged weaknesses in backup management and ransomware preparedness and apologized to stakeholders and fans.
Article Details
- Victim Organization
- JBA
- Incident Type
- Ransomware attack that took down the website server and damaged data
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- The server went down, data was damaged, and the original data could not be restored because the contractor stored the data and backups in the same cloud without a separate copy. JBA planned to launch a new website. The article reports that fan-club member information and credit-card information were not leaked.
- Ransom Or Extortion
- No ransom demand or extortion activity is reported.
- Claim Status
- confirmed
