NEC announced on October 20 that a contractor responsible for system development and maintenance suffered a cyberattack, resulting in damage from unauthorized access at multiple customers and confirming the leakage of information, including personal data. The attack on the contractor occurred in late September, and stolen legitimate account credentials were reportedly exploited.
Customer systems were illicitly accessed using legitimate accounts from the contractor's terminals. Files on the servers were encrypted, rendering various systems unusable. The legitimate access methods used for maintenance and other operations were exploited by the attackers.
Furthermore, files created by NEC and stored in cloud storage used for sharing information with customers, contractors, and other stakeholders were also leaked. These files contained personal information held by customers and system-related data. NEC stated that the detailed contents of the personal information would be reported to customers as soon as they are identified.
The names of the contractor and customers, the number of leaked information items, and the system recovery status have not been disclosed.
Made with AI
