Astemo: unauthorized access to its data sharing cloud
On 16 October, auto parts maker Astemo said its data sharing cloud was accessed through an account of an employee at a contractor, and some of its data leaked. On 17 September a third party claiming to have its data contacted several employees suggesting the data would be published, and Astemo began investigating. Around 2 September the contractor's system had shown login anomalies and multi-factor authentication prompts not triggered by the employee. The leaked data includes names, emails, phone numbers and affiliations of about 350 people, including employees, supplier staff and outside partners. Data of customers and consumers was not included.
Disclosed
2026-10-16
Organizations involved
1
Leaked or at risk
350
350
Downtime
Unknown
Timeline
- Detected 2026-09-17
- Disclosed 2026-10-16
- 29 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- [Data leak][Extortion]
- Entry point
- Supplier
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, ChiyodaManufacturing350 leaked
Astemo, Ltd.
Sources
- [1][Official]当社が利用するデーター共有クラウド環境への不正アクセスおよび情報流出についてAstemo · 2026-10-16
- [2][News]Astemo、取引先などの個人情報350人分が流出 不正アクセスでNikkei · 2026-10-16