Yamaha: its US sales subsidiary was hit by a ransomware attack and information on local business partners may have leaked
Its US sales subsidiary was hit by ransomware. The investigation found that personal data was also stolen at its Canadian subsidiary. Systems in Japan are not affected.
Disclosed
2023-06-16
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
In Japan time it confirmed that the internal network of its US sales subsidiary had been accessed by a third party and that information had leaked. It quickly disconnected the affected devices from the network. [1] [2]
It announced the case and identified a ransomware attack as the cause. [1] [2]
It published a second report. The investigation of its US subsidiary ended and confirmed that no personal data of customers, business partners or employees leaked. A check of all group sites found that its Canadian sales subsidiary, Yamaha Canada Music, had also been accessed without authorization at about the same time, and personal data of local employees, directly run music schools and business partners was stolen. The other 15 domestic and 40 overseas sites were not affected. [3] [4]
Impact
Timeline
- Started, Detected 2023-06-15
- Disclosed 2023-06-16
- 1 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Major]Shizuoka, HamamatsuManufacturing
Yamaha CorporationAfter the US sales subsidiary, personal data was also stolen at its Canadian sales subsidiary.
Sources
- [1][Official]米国子会社への不正アクセスについて - ニュースリリース - ヤマハ株式会社Yamaha Corporation · 2023-06-16
- [2][News]ヤマハ米国子会社にランサムウェア攻撃、現地取引先に関する情報が漏えいした可能性ScanNetSecurity · 2023-06-26 08:05
- [3][Official]米国子会社への不正アクセスについて(第2報)Yamaha Corporation · 2023-07-20
- [4][News]ヤマハグループへのランサムウェア攻撃、米国子会社に続きカナダ子会社でも被害確認ScanNetSecurity · 2023-07-28 08:05