> JapanHacked_
[Investigating][Severity: Major][Ransomware]

Seiko Group: ransomware hit its servers and about 60,000 pieces of personal data of group companies leaked

It confirmed unauthorized access on July 28. It was a ransomware attack, and about 60,000 pieces of personal data of group companies were confirmed leaked.

Disclosed

2023-08-10

Organizations involved

3

Leaked or at risk

60K

60,000

Downtime

Unknown

What happened

  1. It confirmed unauthorized access by a third party to some servers. [1] [3]

  2. It asked an outside expert organization to investigate. [1] [3]

  3. It announced the case, saying that part of the group information stored on the servers may have leaked. [1] [3]

  4. It published a follow-up. The unauthorized access turned out to be a ransomware attack, and a leak of some information on group company employees and related people was confirmed. It has reported to the Personal Information Protection Commission and is working with investigators. [2] [4]

  5. It published a third report. It confirmed that about 60,000 pieces of personal data of Seiko Group, Seiko Watch and Seiko Instruments leaked in the ransomware attack. [5] [6]

Impact

About 60,000 pieces of personal data were confirmed leaked. They include Seiko Watch customers (name, address, phone number and email address; no credit card data), contacts at business partners, applicants to Seiko Group and Seiko Watch, and employees and former employees of group companies. [5] [6]

Timeline

  1. Started, Detected 2023-07-28
  2. Disclosed 2023-08-10
  3. 13 days

Attack or cause

Method
[Ransomware]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address][Phone number][E-mail address][Employment]

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社サーバへの不正アクセスについてSeiko Group Corporation · 2023-08-10
  2. [2][Official]当社サーバへの不正アクセスによる情報漏えいについてSeiko Group Corporation · 2023-08-22
  3. [3][News]セイコーグループの一部のサーバに不正アクセス、情報流出の可能性ScanNetSecurity · 2023-08-21 08:05
  4. [4][News]セイコーグループへのランサムウェア攻撃、従業員と関係者に関する情報の漏えいを確認ScanNetSecurity · 2023-08-25 08:05
  5. [5][Official]当社サーバに対する不正アクセスに関するお知らせ(第3報)Seiko Group Corporation · 2023-10-25
  6. [6][News]セイコーグループへのランサムウェア攻撃、約60,000件の個人情報の漏えいを確認ScanNetSecurity · 2023-10-30 08:05