Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

Casio Confirms Data Breach as Ransomware Group Leaks Files

Casio has shared more information on the recent cyberattack, for which a ransomware group has now taken credit.

Casio ransomware

Japanese electronics giant Casio has revealed that the recent cyberattack was carried out by a ransomware group and confirmed that the incident has resulted in a data breach.

Casio said last week that it had detected unauthorized access to its network on October 5. The incident resulted in a system failure and some service disruptions.

In an update shared on its website on Friday, the company said the incident was the result of a ransomware attack that involved hackers obtaining personal information, as well as confidential files belonging to the company and its affiliates. 

While Casio’s investigation into the data breach is ongoing, it has determined to date that the compromised information could include personal and other information on employees, the personal information of business partners, information on individuals who applied for a job, and information on some customers.

The data breach also impacts information related to contracts, invoices, and sales, as well as internal legal, financial, HR, audit, sales, and technical documents. 

The ransomware group named Underground, which has been around since at least July 2023, has taken credit for the attack, claiming to have stolen over 200 GB worth of files from Casio systems. 

Advertisement. Scroll to continue reading.

The cybercriminals claim to have obtained legal documents, employee personal and payroll information, NDAs, patents, financial documents, projects, and other confidential files.

The hackers have started leaking the stolen data, which indicates that Casio has refused to pay a ransom. 

Indeed, Casio has confirmed a data leak, urging people to refrain from spreading the stolen information “as it could increase the damage caused by the leak of information on this case, violate the privacy of those affected, have serious effects on their lives and businesses, and encourage crime”.

“In the event of the sending of spam emails or related fake information, slander against those who have been the targets of the leaked information, employees of the Company and its affiliated companies, or other nuisance behavior, we will work closely with the police to respond strictly, protect the privacy and safety of all those involved, and strive to minimize secondary damage,” Casio said. 

Related: Fidelity Data Breach Exposed Customer Information

Related: Doctor Web Refutes Hackers’ Claims of User Data Theft

Related: 31 Million Users Affected by Internet Archive Hack

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

With "Shadow AI" usage becoming prevalent in organizations, learn how to balance the need for rapid experimentation with the rigorous controls required for enterprise-grade deployment.

Register

Delve into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization.

Register

People on the Move

MongoDB has appointed Doug Bowers as Chief Information Security Officer.

Ben Wilkens has been promoted to Director of Cybersecurity at NMFTA.

Cato Networks has appointed Meital Koren as Chief Legal Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.