Japanese electronics giant Casio has revealed that the recent cyberattack was carried out by a ransomware group and confirmed that the incident resulted in a data breach.
See also: Pokémon developer Game Freak suffers cyberattack
Casio said last week that it had detected unauthorized access to its network on October 5. The incident resulted in a system failure and some outages.
In an update shared on its website on Friday, the company said the incident was the result of a ransomware that involved the leakage of personal information, as well as confidential files belonging to the company and its subsidiaries.
While Casio's investigation into the data breach is ongoing, it has determined to date that the compromised information could include personal and other information about employees, personal information about business partners, information about people who applied for jobs, and information about certain customers.
The data breach also affects information related to contracts, invoices, and sales, as well as internal legal, financial, HR, auditing, sales, and technical documents.
See also: Rhysida Ransomware breached Axis healthcare systems
The ransomware group called Underground, which has been around since at least July 2023, took credit for the attack, claiming to have stolen over 200GB from Casio systems.
Cybercriminals claim to have obtained legal documents, personal and employee payroll information, NDAs, patents, financial documents, projects, and other confidential files .
The hackers have started leaking the stolen data, which indicates that Casio has refused to pay the ransom.
Indeed, Casio confirmed a data breach, urging people to refrain from disseminating the stolen information "as it could increase the damage caused by the information leak in this case, violate the privacy of those affected, have serious repercussions on their lives and businesses, and encourage crime."
See also: Casio reports IT systems failure after cyberattack
A data breach, such as the one at Casio, occurs when confidential information is leaked or collected by unauthorized individuals or systems. This can happen through various methods, such as hacking, phishing, or even due to internal threats from employees. The consequences are serious, as they can include loss of personal data, financial loss to businesses, and legal penalties. It is essential to take security measures, such as data encryption, staff training, and implementing strong access control measures, to protect data from potential threats.
Source: securityweek
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
