Sumitomo Heavy Industries: unauthorized access to group servers, with the full damage under investigation

1. 2024-02-04

   It confirmed unauthorized access to its group servers, began investigating with outside experts and started recovery work. [1]

2. 2024-02-09

   It announced the case. It scanned all group servers and PCs and cut the servers that needed isolation off the internal network. [1] [2]

3. 2024-07-16

   Investigation showed that personal data of employees of the company and group companies had leaked, and it announced this. It also reported to the Personal Information Protection Commission. [3] [4]

It expects the full damage and cause to take time to establish. It is checking with outside experts whether information leaked, and is also assessing the effect on its earnings forecast. [1]

The data that leaked or may have leaked is names, affiliations (company, department, post), and business phone numbers and email addresses of employees, including some retirees. The only confirmed leak is the business email addresses of 69 people. [3] [4]