Toshiba TEC Corp 's European subsidiary appears to be the latest victim of DarkSide ransomware .
Toshiba TEC Corporation said today that it was the victim of a cyberattack that affected certain areas of Europe.
The company is known for manufacturing electrical equipment, including barcode scanners, Point-of-Sale (PoS) systems, printers, and other products.
The company's French subsidiary appears to have been targeted by cybercriminals.
See also: Hackers targeted Ireland's public health system (HSE)
After the attack was discovered, Toshiba TEC Corp shut down networks between Japan, Europe and subsidiaries to "prevent the spread of the attack," while backups were used.
The company says it has launched an investigation to assess the severity of the attack and is working with security experts (outside the company) to address the problem.
"We have not yet confirmed that there has been a leak of customer information," the company says.
However, “it is possible that some information and data has been leaked by a criminal gang.”
The attack on Toshiba TEC Corp is said to be carried out by the DarkSide, a group that gained notoriety after attacking the largest US fuel pipeline management company, Colonial Pipeline.
Learn more: Colonial Pipeline: Ransomware attack hits largest US fuel pipeline
DarkSide belongs to the ransomware-as-a-service (RaaS) category and is provided to cybercriminals to carry out attacks.
The DarkSide creators’ associates use the “double blackmail” tactic. Victim companies first receive a note asking for money to provide a decryption key. If the companies do not want to pay the ransom, the hackers threaten them with the disclosure of confidential data and files stolen during the initial access to the systems.
Toshiba subsidiary TEC Corp said "minimal data was lost.".
See also: Brenntag: Chemical distribution company paid $4.4 million to DarkSide ransomware
The hackers claim to be in possession of 740 GB of data belonging to Toshiba TEC Corp.
In recent days, the DarkSide gang appears to be very active. The FBI and CISA have issued alerts and advisories regarding DarkSide and the broader RaaS criminal operations.
Source: ZDNet
