Seiko Group: ransomware hit its servers and about 60,000 pieces of personal data of group companies leaked
It confirmed unauthorized access on July 28. It was a ransomware attack, and about 60,000 pieces of personal data of group companies were confirmed leaked.
Disclosed
2023-08-10
Organizations involved
3
Leaked or at risk
60K
60,000
Downtime
Unknown
What happened
It confirmed unauthorized access by a third party to some servers. [1] [3]
It asked an outside expert organization to investigate. [1] [3]
It announced the case, saying that part of the group information stored on the servers may have leaked. [1] [3]
It published a follow-up. The unauthorized access turned out to be a ransomware attack, and a leak of some information on group company employees and related people was confirmed. It has reported to the Personal Information Protection Commission and is working with investigators. [2] [4]
It published a third report. It confirmed that about 60,000 pieces of personal data of Seiko Group, Seiko Watch and Seiko Instruments leaked in the ransomware attack. [5] [6]
Impact
About 60,000 pieces of personal data were confirmed leaked. They include Seiko Watch customers (name, address, phone number and email address; no credit card data), contacts at business partners, applicants to Seiko Group and Seiko Watch, and employees and former employees of group companies. [5] [6]
Timeline
- Started, Detected 2023-07-28
- Disclosed 2023-08-10
- 13 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Chiba, Chiba, Mihama-kuManufacturing
Seiko Instruments Inc.[Breached][Major]Tokyo, ChuoManufacturing60,000 leaked
Seiko Group Corporation[Breached][Major]Tokyo, ChuoManufacturing
Seiko Watch Corporation
Sources
- [1][Official]当社サーバへの不正アクセスについてSeiko Group Corporation · 2023-08-10
- [2][Official]当社サーバへの不正アクセスによる情報漏えいについてSeiko Group Corporation · 2023-08-22
- [3][News]セイコーグループの一部のサーバに不正アクセス、情報流出の可能性ScanNetSecurity · 2023-08-21 08:05
- [4][News]セイコーグループへのランサムウェア攻撃、従業員と関係者に関する情報の漏えいを確認ScanNetSecurity · 2023-08-25 08:05
- [5][Official]当社サーバに対する不正アクセスに関するお知らせ(第3報)Seiko Group Corporation · 2023-10-25
- [6][News]セイコーグループへのランサムウェア攻撃、約60,000件の個人情報の漏えいを確認ScanNetSecurity · 2023-10-30 08:05