An article titled “Ransomware Attack on MKSystem Corporation and the Course of Actions Such as Reporting and Notification – Actions to Be Taken by Service Providers, Users and Users’ Clients in the Event of Information Leakage from Cloud Services (SaaS),” written by Hiroyasu Kageshima, was posted on “UNITIS,” an IT and information security journal.

• Actions taken by MKSystem (service provider) following the detection of ransomware attack
• Actions to be taken by “service users” and “users’ clients”
• Only 19% of the targeted companies could restore data from backup. Take this opportunity to review your server security measures.

https://unitis.jp/articles/6264/