DisclosureLens
GLOBALtranslated → enUnknownRansomwareStormousLow

Higuchi Shokai

bd_dd93ec198d992434 · schema v1 · pii pii-v1

Severity

Low

Discovered

Filed

Jun 29, 2026

To disclose

Affected

Not disclosed

Linked

2 filings

Confidence

60%
Full breach record for Higuchi Shokai

Press / market disclosure — not a breach-notification filing

A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage and machine-translated to English — verify against the source.

Summary

machine-translated

Higuchi Shokai subsidiary accounting information leak, notification from business partners stating "possible data leak due to ransomware infection" | ScanNetSecurity. Higuchi Shokai: The company Higuchi Shokai announced that an unauthorized access to its system, identified as a possible data leak due to ransomware infection, had occurred. The disclosed information includes the financial data of a subsidiary and basic information (name, address, contact details) of the subsidiary's customers. Stormous claimed a cyberattack on June 28. Linked ransomware group: stormous.

Incident timeline — mostly unverified

? — ?

Breach window unknown

Jun 29, 2026

Press report

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Attack → press

Compliance clock

Not assessable

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market reportThis record

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source ceiling

  • incident type + narrative only (may be machine-translated)
  • discovery date
  • materiality
  • affected count
  • data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.

About this groupFirst seen 2022-03-22

stormous

According to ransomware.live, Stormous is an Arabic-speaking, pro-Russian ransomware and hacktivist group active since at least 2022, known for politically motivated attacks across 15+ countries, collaborating with GhostSec on the GhostLocker 2.0 RaaS platform and inheriting GhostSec's RaaS operations in mid-2024.

202 tracked hereFull profile →