Casio: ransomware leaks employee, partner and customer personal data

Casio announced a system failure caused by unauthorized network access on 8 October 2024, and on 11 October a partial service stop and data leak caused by ransomware. Its investigation results of 7 January 2025 say its servers were accessed from abroad on 5 October and made unusable by ransomware; it named gaps in its phishing email defenses and in its global network security, including overseas offices, as the cause. Leaked personal data covers 6,456 employees (names, employee numbers, email addresses, HR data and more), 1,931 business partners (names, contacts, company addresses and more) and 91 customers (delivery addresses, names, phone numbers, purchased products and more). No traces of theft from customer databases were found. According to BleepingComputer, the Underground ransomware group claimed the attack and published data it said it had stolen. Casio did not respond to any demands from the group. Services have resumed except some individual ones. Employees reported spam suggesting a connection to the incident; Casio had received no reports of secondary harm to customers or partners.