From our other sites
The story
Tokyo’s Kodaira City official website has been inaccessible since shortly after 8 a.m. on October 7, after suffering a ransomware attack. According to the city, the cloud service used by the contractor that maintains the website appears to have been hit by a third party, and personal information of residents that the city had collected through its contact forms and other channels may have been leaked. There is no timeline yet for restoring service. On 5ch, the discussion branched out in all directions — doubts about the contracted cloud infrastructure and the state of government IT, distrust of the My Number (Japan’s national ID) system, and more.
In Tokyo’s Kodaira City, the city’s official website has been inaccessible since the 7th after being hit by a ransomware attack from a third party. According to the city, residents’ personal information may have been leaked.
According to Kodaira City, the website outage began shortly after 8 a.m. on the 7th, and there is still no prospect of restoration.
The cloud service used by the contractor responsible for maintaining the website is said to have been hit by a third-party ransomware attack, and personal information the city had obtained through its contact forms and other means may have been leaked. (Source continues below)
Source: news.yahoo.co.jp / Original article here
What people said
Just a clerical job
A data center beats on-prem anyway, right?
So targeting Kodaira of all places means…
We'll be fine if every resident just chips in ¥1,000
But snapshots and everything got nuked too, so without a local backup recovery is basically impossible
No way the hackers didn't keep a copy for themselves
The whole point is to hold the data hostage for extortion
Why are you being so naive about this?
If that were true, you wouldn't be able to print a residency certificate instantly at a convenience store lol
Guess a My Number (national ID) data leak is coming soon too lol
No problem
It's written right in the terms that even if My Number data gets leaked or misused, the government takes zero responsibility
That's probably already happening lol
Going forward AI is going to pull together your LINE, Ameba, and old Twitter-era messages and link it all straight to your personal data
We're headed into an era where AI compiles celebrity wikis listing exactly who spent how many hours with whom at a love hotel — the tabloids are done for
It's fine, the government takes zero responsibility anyway
(Just riffing on the "Shouhei" name connection — Kodaira is written with the same kanji, 小平, as Xiaoping)
Is Otani a "Mao" too then? (continuing the pun chain — baseball star Shohei Otani shares the "Shouhei" reading, now linking to Chinese leader Mao Zedong)
Nerima and Itabashi are just too expensive
There can't be many places right by the station…
Can you even build anything on the cemetery side?
Maybe they're going easy on it out of deference to parent company SoftBank?
The evening news really avoided saying "SoftBank"
(This was on) Nippon TV
Wonder if my old data got swept up in this too
Same here
Who knows
The skill level is rock bottom
Feels like it's already too late at this point
They tout "improved service" while it's full of holes
It's less about the engineers and more that they don't want to pay for equipment or updates
Honestly, it'd be better if it just disappeared outright
There's a real chance it gets secretly hijacked and starts pumping out misinformation
Imagine a flood-danger alert getting swapped for "It's fiiine, totally safe~"
But hacking a government system,
what's even the point, that part's unclear
Is this a dry run for a real crisis
a nation-vs-nation conflict
in other words, prep work for war?
If residency certificates and other government services go down
I'd imagine quite a lot of people would be in real trouble
They don't even need to attack infrastructure — the US, China, and Russia could all be wiped out instantly anyway
Background and Key Points of This Discussion
In recent years, ransomware attacks on local governments have increasingly entered not through the municipality itself but through a contracted cloud vendor. Local governments outsource much of their operations to vendors, which makes it hard for the public to see where responsibility for an outage or breach actually lies. In the thread, discussion went on without ever quite settling whether this was simply a case of “the site being encrypted and inaccessible” or whether “data was actually stolen.” In recent ransom-driven attacks, the common method has shifted to stealing data in advance and then threatening to publish it, so the site outage and the potential data leak may well be separate issues. Note that the information at risk here is data the city itself held via its contact forms and similar channels, and is not directly tied to the My Number national ID system itself.
*This article is compiled and summarized from the 5ch (News Express+) thread “[Tokyo] Kodaira City’s official website remains inaccessible after ransomware attack… residents’ personal information possibly leaked.”
Leave a Reply