Hello Kitty theme parks knocked out by hacker attack

Two Japanese theme parks owned by the Hello Kitty creator Sanrio are struggling after malicious actors breached its network, prompting the company to halt some services.

Sanrio Puroland and Harmonyland, two Japan-based theme parks, were hit late January with both theme parks issuing notifications about unauthorized access to their systems on January 21st and January 22nd. Both locations were unable to issue codes for purchased tickets and sell annual passes.

Sanrio Puroland likely faced additional issues, as the park was unable to operate its reservations service, prompting the outfit to only admit visitors who had made reservations prior to the attack. According to the latest breach notification from Puroland, the restrictions will be in place at least until the end of the month.

We have reached out to Sanrio for comment and will update the article once we receive a reply.

Messages on theme parks‘ websites said authorities have been notified about the attack and the company will launch an investigation, which should confirm the nature of the attack and whether any visitor information was leaked.

While it’s unclear who breached Sanrio theme parks, the nature of the accident points to a ransomware attack. Cybercriminals often target time-sensitive systems, such as ticketing service, ballooning company losses. The tactic is meant to force victims into coughing up whatever payment cybercrooks demand.

Opened in 1990, Sanrio Puroland, also known as Hello Kitty Land, mimics the Disney theme parks. Meanwhile Harmonyland, opened in 1991, is a similarly themed outdoor amusement park.

Both are run by Sanrio, a Japanese entertainment company, focusing on the so-called kawaii pop culture. The company’s most notable character is Hello Kitty. Sanrio posted revenue exceeding $470 million in 2023.