In September 2023, Yusen Logistics, a Tokyo-based subsidiary of the NYK Group, fell victim to a ransomware attack orchestrated by the BlackCat/ALPHV gang. The cybercriminals, leveraging their advanced ransomware-as-a-service (RaaS) platform, claimed to have exfiltrated 90GB of sensitive company data, including potentially proprietary operational and corporate information. The attack not only risked the exposure of critical internal documents but also caused operational disruptions, threatening the company’s logistical workflows and client trust. BlackCat/ALPHV, active since late 2021, is infamous for its sophisticated encryption methods, ability to bypass security tools, and high ransom demands, often tailored to the victim’s financial capacity. While the full scope of the stolen data remains undisclosed, the breach poses severe risks, including financial fraud, reputational damage, and regulatory penalties, particularly if customer or partner data was compromised. The incident underscores the growing threat of targeted ransomware campaigns against global supply chain and logistics firms, where operational continuity and data integrity are paramount.
Source: https://ransomwareattacks.halcyon.ai/attacks/blackcat-alphv-attacks-yusen-logistics
TPRM report: https://www.rankiteo.com/company/yusen-logistics-
"id": "yus312092125",
"linkid": "yusen-logistics-",
"type": "Ransomware",
"date": "6/2021",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"
{'affected_entities': [{'industry': 'logistics',
'location': 'Tokyo, Japan',
'name': 'Yusen Logistics',
'type': 'subsidiary'}],
'data_breach': {'data_exfiltration': True,
'sensitivity_of_data': 'sensitive',
'type_of_data_compromised': 'company information'},
'date_publicly_disclosed': '2023-09',
'description': 'In September 2023, the BlackCat/ALPHV ransomware gang '
'attacked Yusen Logistics, a subsidiary of the NYK Group based '
'in Tokyo, Japan. The gang claimed to have stolen 90GB of '
'company information. The consequence of the attack is the '
'potential exposure of sensitive company information and '
'operational disruption.',
'impact': {'data_compromised': '90GB of company information',
'operational_impact': 'operational disruption'},
'motivation': 'financial gain',
'ransomware': {'data_encryption': True,
'data_exfiltration': True,
'ransomware_strain': 'BlackCat/ALPHV'},
'threat_actor': 'BlackCat/ALPHV',
'title': 'BlackCat/ALPHV Ransomware Attack on Yusen Logistics (September '
'2023)',
'type': ['ransomware', 'data breach']}