dandm-vpn-ransomware-2026 · Disclosed 2026-06-12
D&M: unauthorized access and impact
An attacker entered through a VPN device and infected the file server with ransomware; the VPN compromise method is undisclosed. 633 fax-order records from approximately two years may have been disclosed; card and bank-account information was not identified.
Outcome: Confirmed breach
Entry path and evidence
- Reported fact
An attacker entered through a VPN device and infected the file server with ransomware; the VPN compromise method is undisclosed.
[s1]pp.1-2 概要 / 原因 / 現在の状況 - Reported fact
633 fax-order records from approximately two years may have been disclosed; card and bank-account information was not identified.
[s1]pp.1-2 概要 / 原因 / 現在の状況
Timeline
Disclosure date established by the reviewed notice. [s1]
Reported response
- Reported fact
The affected file server was isolated and VPN security measures completed.
[s1]pp.1-2 概要 / 原因 / 現在の状況
Cause and mitigation hypotheses
Not assessed. Editorial hypotheses have not been added for this incident; this does not establish safety or a confirmed cause.
Evidence relevant to prevention
Insufficient evidence
Undisclosed entry or patch timing prevents an avoidability assessment. Inspect privileges, retrieval logs, retention and deployed configuration using the linked rules.
Editorial assessment; not a determination of liability. [s1]
Unknowns and AI involvement
The reviewed disclosures do not establish attacker use of AI.
The notice does not establish all entry, timing and extraction details; unresolved claims remain unknown.
Sources
[s1] D&M · Primary source
D&M：事故に関する公表資料 ↗Reviewed 2026-10-09