Nidec Instruments: ransomware; partner, customer and employee personal data at risk

On 10 June 2024 Nidec Instruments disclosed a ransomware attack. On 26 May its business systems were accessed without authorization, and data on servers and file servers of the company, its domestic group companies and some overseas subsidiaries was encrypted. On 18 June the attackers' leak site posted download links that appeared to relate to the group (downloads stopped working from 19 June). According to the third report of 25 July, possibly leaked data covers 318,151 records of business partners and others, 71,089 records of music box buyers and event participants, and 13,290 records of employees, former employees and their families (including My Number, bank account and salary data), all counted with duplicates. Personal data of Nidec shareholders who won shareholder gifts is also included. The attackers are believed to have obtained the ID and password of a system administrator account. The company and Nidec did not respond to the ransom demand.