According to Media Innovation, The Japan Times and group company News2u Holdings disclosed unauthorized access to a group server on October 2 and said in a second report on the 16th that a ransomware attack was confirmed on September 18, hitting a file server used by administrative departments until August 2022 [1]. On October 15 the company confirmed data the attacker claims to have stolen was published on an external site, possibly including HR and vendor data from 2001 to August 2022 such as names, addresses at the time and payroll accounts, and for some people My Number, passport, residence card and health insurance details; digital editions, the subscriber database and payment systems were unaffected [1]. Former staff and vendors who may be affected should check account statements for unfamiliar debits and beware of emails, calls and mail impersonating the group [1].
Japan Times group's old file server hit by ransomware; former staff ID numbers, passports and payroll accounts may be exposed
1 min read
- Disclosed
- Oct 2, 2026
- Occurred
- Sep 18, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Media, entertainment & gaming
What to do nowOur advice
- Check bank account statements for unfamiliar debits or suspicious activity [1].
Timeline
Technical details
Remediation
Vendor guidance
- 1Check account statements detect[1]
Check accounts for unfamiliar debits and beware of impersonation.
References
Media1
- [1]
“16日の第2報では、9月18日にランサムウェアによる攻撃を確認していたことを明らかにしました。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.