The well-known ransomware gang BlackCat/ALPHV has claimed responsibility for a recent cyberattack on Japanese watchmaker Seiko.
The gang appears to have added Seiko to extortion website , also publishing some data allegedly stolen from the company during the attack.
It is worth noting that Seiko is one of the largest watch manufacturing companies in the world, with approximately 12,000 employees and annual revenues exceeding $1.6 billion.
See also: New variant of BlackCat ransomware uses Impacket and RemCom tools
On August 10, 2023, the Japanese company published a data breach notification informing that an unauthorized user gained access to part of its IT infrastructure and thereby gained access to data.
“ It appears that [on July 28, 2023] someone or people who have not yet been identified gained unauthorized access to at least one of our servers ,” Seiko’s statement said
“Then, on August 2, we commissioned a team of external experts, in the field of cybersecurity, to investigate and assess the situation“.
The company admitted that it is almost certain that some information stored by the company may have been compromised.
Seiko apologized to customers and business partners who may have been affected by this data breach and urged them to be vigilant as they may receive fake messages or emails impersonating Seiko.
See also: Bronze Starlight group attacks gaming companies
BlackCat ransomware gang claims responsibility for Seiko attack
As we mentioned above, the BlackCat ransomware group claimed to be behind the attack on Seiko, publishing samples of data supposedly stolen during the attack.
In fact, hackers have fooled Seiko's IT team by saying they were able to gain access and leak important data that appears to be production plans, employee passport scans, new model release plans, and results of specialized laboratory tests.
Additionally, what is considered particularly worrying for the company is that hackers leaked samples claiming to be confidential technical information and designs of Seiko watches. This indicates that BlackCat is very likely in possession of designs that showcase internal Seiko elements, including specific technology and patents owned by the company, which, once exposed, could be used by competitors and companies imitating popular brands.
See also: Tesla data breach: Two former employees held responsible
BlackCat ransomware
BlackCat is one of the most advanced and well-known ransomware gangs that is constantly evolving its extortion tactics. For example, the group was the first to use a clearweb site dedicated to leaking data for a specific victim. It also recently created a data leak API, allowing for easier distribution of stolen data. The recent attack on Seiko shows that the gang is still very active and successfully targeting large companies.
A few words about Seiko
Seiko Group Corporation is a manufacturer of electronic devices, semiconductors, jewelry, and other products in addition to watches. It was founded in 1881 by Kintarō Hattori in Tokyo and introduced the world's first commercial quartz wristwatch in 1969.
Source: www.bleepingcomputer.com
