asio has confirmed that customer data has been compromised in the ransomware attack. The electronics giant from Japan confirmed that earlier this month
the ransomware attack led to customer data theft.
On October 7, Casio suffered a cyber attack, at that time the nature of the attack still remained unknown. The cybersecurity attack caused unknown ”system disruption” across the company, only now, Casio announced in a public statement on their website “Subsequently, it was discovered that our servers had been damaged by a third-party ransomware attack, and resulted in the leakage of personal information and confidential internal information held by the Company and its affiliated companies. We deeply apologize for the concern and inconvenience this may cause to our customers and other concerned parties.”.
With their official statement, Casio confirms that the attackers accessed and stole personal data that belonged to their employees, contractors, business partners, and even people who have been interviewed for the company along with more sensitive information regarding the company financials, involving human resources, and event technical information.
Casio also informed the public that hackers accessed “information about some customers”, however, they did not make public which type of data had been stolen and how many individuals had been affected.
Subscribe to our newsletter
Yet, Casio made clear that credit card data information was not compromised, talking about their ID and ClassPAd services that were not affected by the security breach. The attackers behind the cybersecurity breach have not been made public yet. However, a ransomware and extortion racket named Underground has claimed responsibility for the attack.
Upgrownd is a newer extortion and ransomware organization, that was first observed realizing cyberattacks in June last year. Even more so in a post on the dark web, Underground has claimed that they have extracted more than 200 gigabytes of data from Casio, also talking about legal documents, payroll data, and personal information. And, in order to prove their attack, they have posted samples of the data they have extorted.
Casio also reported “As a result, some important systems within the Company and its affiliated companies have become unusable, and some services have also been affected.
The full extent of the damage is still under investigation, but the Company has set up a task force and is currently working diligently to quickly restore internal systems and resume operations.”
As of now, it is still unknown whether or not Casio has received ransom demands, Casio saying that “full extent of the damage” will be investigated.