HOYA: ransomware halts production and leaks personal data

On 1 April 2024 HOYA announced a system failure in its group. Its April 2025 report says a malicious third party attacked its systems on 30 March, and from 31 March it cut the systems off the network. On 23 April it said production and supply were mostly returning to normal. BleepingComputer reported that the Hunters International ransomware group demanded USD 10 million for a decryptor and for not releasing stolen files. HOYA found that data leaked from some systems of its PENTAX Lifecare (endoscope) and Medical (intraocular lens) divisions: names, sex and age of about 1,000 endoscopy patients, résumés and other hiring data of about 500 applicants, contacts and bank accounts of about 2,000 business partners, and bank accounts, ID documents and salary data of about 3,000 employees, former employees and family members. No misuse has been reported, and no card data was found to have leaked.