Casio Confirms Ransomware Attack: Personal Data of 8,500 Individuals Stolen by Hackers in October
In a recent cybersecurity incident, Casio, the renowned Japanese electronics manufacturer, revealed that personal data of nearly 8,500 individuals was compromised during a ransomware attack in October. This breach highlights the ongoing challenges faced by corporations in safeguarding sensitive information.
Details of the Ransomware Attack
On October 5, Casio fell victim to a significant ransomware attack that rendered many of its systems unusable. The Underground ransomware gang claimed responsibility, alleging they had stolen over 200 gigabytes of data from the company’s network, as reported in a dark web post accessed by TechCrunch.
Investigation Findings
Following a thorough investigation, Casio disclosed that the hacking group, reportedly linked to the Russian cybercriminal organization known as RomCom (or Storm-0978), accessed sensitive personal information of approximately 8,500 individuals.
- Employee Data: Nearly 6,500 employees were affected, with leaked information including:
- Names
- Employee numbers
- Email addresses
- Gender information
- Dates of birth
- ID card data
- Family data
- Taxpayer ID numbers
- Business Partner Information: Data of over 1,900 business partners was accessed, including:
- Names
- Email addresses
- Phone numbers
- ID card information
- Customer Data: Personal information of 91 customers was also compromised.
Fortunately, Casio confirmed that no credit card information was exposed during the breach, as the system managing customer payment details remained unaffected.
Phishing Techniques and Company Response
In its update, Casio admitted that the hackers exploited phishing techniques to gain access, taking advantage of certain deficiencies in the company’s email security measures. The company emphasized that it did not engage in any negotiations with the hackers, stating, “we have not responded to any unreasonable demands from the ransomware group that carried out the unauthorized access.”
Restoration of Services
Casio reported that most services affected by the ransomware attack have since been restored, although some specific services, such as the G-Shock customization service in Japan, remain offline. Casio is working diligently to ensure the security of its systems moving forward.
For further updates on cybersecurity and technology news, stay tuned to our blog.
