MinebeaMitsumi: file server intrusion
An intrusion was detected on March 11. The April report put potentially exposed records at up to about 160,000. July's final report listed about 3,800 business-contact records, 30,000 shareholders/former shareholders (124,000 records before deduplication), and 4,800 employee records. Attackers obtained an administrator account through network equipment. Systems were operating normally, with no confirmed secondary harm.
Disclosed
2025-03-18
Organizations involved
1
Leaked or at risk
160K
160,000
Downtime
Unknown
Timeline
- Detected 2025-03-11
- Disclosed 2025-03-18
- 7 days
Attack or cause
- Method
- [Intrusion][Credential abuse]
- Impact
- [Data leak]
- Entry point
- VPN device
Data exposed or at risk
Organizations involved
[Breached][Critical]Nagano, MiyotaManufacturing160,000 leaked
MinebeaMitsumi Inc.
Sources
- [1][Official]当社ファイルサーバーへの不正アクセス発生について(第二報)MinebeaMitsumi Inc. · 2025-04-11
- [2][Official]当社ファイルサーバーへの不正アクセス発生について(最終報)MinebeaMitsumi Inc. · 2025-07-11