CEC Says Investigation Found No Data Leak After Ransomware Attack

Summary

CEC says its investigation into the August 5 ransomware attack at its Tokyo Second Data Center found no data leakage. The affected area was isolated and rebuilt, and services have resumed in a secure environment.

Key points

• CEC said its September 3 final report concluded that the attack caused no information leakage, based on analysis of traffic, restored data, and logs.
• The company said the affected area was separate from customer systems and data, and related systems were not affected.
• The incident caused a temporary service outage for some customers, despite CEC's conclusion that customer systems and data were unaffected.
• CEC said it identified the ransomware type and entry route but did not disclose their details, the ransomware family, or the attacker.
• The affected area was isolated and rebuilt; CEC says restored services continue to operate in a secure environment.
• CEC reported the investigation results to police and Japan's Personal Information Protection Commission, and plans to review internet-connected equipment and communication routes and strengthen network defenses.