Five Foxes Investigates Possible Ransomware Infection on Headquarters Servers

Summary

Five Foxes says it found a possible ransomware infection on some headquarters servers on July 8 and shut them down. The scope, including possible customer-data exposure, remains under investigation; stores and the separate online store remain open.

Key points

• Five Foxes reported the possible infection on July 14, after identifying it during a routine security investigation on July 8.
• The company shut down affected servers and internet and email functions to limit potential spread.
• It has not disclosed whether files were encrypted, a ransom was demanded, an attacker group was involved, or data was taken.
• The company is investigating the impact, including possible exposure of customer information; affected data types and the number of people affected are unknown.
• Stores and the separately operated online store remain open, according to the company.
• Five Foxes established a response team, reported the matter to Japan’s Personal Information Protection Commission, and requested help from external investigators and police.
• The article advises customers and business partners to verify unusual messages through official or previously known contact channels.