An actual incident in which the core system was shut down by unauthorised access by a third party, resulting in partial data loss. Although no information theft or external leakage has been confirmed, the incident continues to be managed as an ongoing risk of information leakage and loss.