> JapanHacked_
[Resolved][Severity: Moderate][Intrusion]

Nippo Sangyo: the network of its Malaysian plant was accessed without authorization, likely through a VPN device flaw

The network of its Malaysian plant was accessed without authorization and internal systems were stopped. All operations resumed on April 22. No leak of information was confirmed.

Disclosed

2022-04-08

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It announced that a third party had accessed the network of its Malaysian plant without authorization. The plant stopped its internal systems including the network, reported to the authorities and worked on recovery with an outside specialist. It said the effect on consolidated results was minor. [1]

  2. It announced that the systems were restored and all operations resumed. [2]

Cause and impact

The intrusion route was most likely a flaw in the plant's VPN device. No fact of information stored at the plant leaking outside was confirmed. Networks of other group companies were not affected. [2]

Timeline

  1. Disclosed 2022-04-08
  2. 1 days

Attack or cause

Method
[Intrusion]
Impact
[Service outage]
Entry point
VPN device

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]日邦産業グループ会社のマレーシア工場に不正アクセス、連結業績への影響は軽微ScanNetSecurity · 2022-04-11 08:05
  2. [2][Official]不正アクセスを受けた当社グループ会社のシステム復旧等に関するお知らせNippo Sangyo Co., Ltd. · 2022-04-22