How Nagano Nippo Kept Publishing After a Ransomware Attack
Summary
A ransomware attack struck Nagano Nippo on Dec. 19, 2023, just as printing was due to begin. The newspaper isolated its network, but production servers and most layout PCs became unusable, with data nearly destroyed.
Key points
- The incident began around 10:50 p.m. on Dec. 19, 2023, as printing of the Dec. 20 edition was about to start.
- Staff reported a suspicious display suggesting external access; the main server then showed a warning and a note demanding an email to arrange recovery.
- The digital room head instructed staff to unplug LAN cables and, after arriving, forcibly shut down the servers.
- The article says the server holding articles and photographs and most of the 14 layout PCs became unusable; data was nearly destroyed.
- At an emergency management meeting, executives decided not to negotiate with the attackers and to keep the newspaper’s publication history going, even if that meant producing a wall newspaper.
Article Details
- Victim Organization
- 長野日報社
- Incident Type
- Ransomware attack
- Incident Date
- 2023-12-19
- Data Types Exposed
- Articles
- Photographs
- Operational Impact
- The server storing articles and photographs and most of 14 layout PCs became unusable, and data was described as almost completely destroyed. The attack occurred as printing of the December 20 newspaper was about to begin.
- Ransom Or Extortion
- A note requested that the victim send an email to restore access. The article does not report a ransom demand or payment.
- Claim Status
- confirmed