Kyocera: an employee PC was infected with Emotet, and 3,500 mails with data on home solar customers and others may have leaked

1. 2020-09-26

   A PC of an employee in the Smart Energy division was infected with Emotet, and mail posing as the employee was sent to contacts. Hours later the company noticed and cut the PC off the network. [1]

2. 2020-10-01

   Outsiders reported receiving suspicious mail. [1]

3. 2020-10-16

   The company disclosed the case. [2]

The PC held 38,502 mails sent and received from April 2012 to April 2016, and 3,500 of them may have leaked. They include names, addresses, phone numbers and mail addresses of homeowners who bought or got quotes for home solar systems through house builders, builders' staff and Kyocera employees: 14,853 items counted one by one, with duplicates. [1]

The PC was used remotely but connected through VPN with the same protection as in the office, and the company did not think remote work itself caused the infection. The spoofed mail carried the malware in encrypted zip files. [1]