> JapanHacked_
[Contained][Severity: Critical][Intrusion][Malware]

Kojima Press Industry: a system failure halted all 14 Toyota plants in Japan; a cyberattack is possible

Unauthorized access and a virus infection stopped all systems, and Toyota halted all 14 plants (28 lines) in Japan. Deliveries resumed on March 2.

Disclosed

2022-02-28

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. In the evening it confirmed external unauthorized access and stopped all systems. [3]

  2. Its internal systems ran badly from the morning and went down. Toyota announced it would halt all 14 plants (28 lines) in Japan on March 1 because of a system failure at a supplier. [1] [2]

  3. It announced the system stop as caused by a virus infection. [3]

  4. It resumed deliveries to all customers. [4]

  5. It published a further apology, saying failures remained in other internal systems. [4]

Impact

According to Reuters, the production of about 13,000 vehicles is affected. A spokesperson said the servers might have been attacked and that the cause and damage were being checked. It said it had heard that the system managing parts supply to Toyota was not affected. [2]

Timeline

  1. Detected 2022-02-26
  2. Disclosed 2022-02-28
  3. 2 days

Attack or cause

Method
[Intrusion][Malware]
Impact
[Service outage]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]2022年3月 国内工場の稼働について（2/28時点）Toyota Motor Corporation · 2022-02-28
  2. [2][News]トヨタ国内全工場あす停止、仕入れ先でシステムダウン　サイバー攻撃かReuters · 2022-02-28
  3. [3][Official]ウィルス感染被害によるシステム停止事案発生のお知らせKojima Press Industry Co., Ltd. · 2022-03-01
  4. [4][Official]システム障害事案発生のお詫びKojima Press Industry Co., Ltd. · 2022-03-07