Casio once again became the victim of cyber breach. Involving unauthorized access to its network, resulting in system-wide disruptions.
According to Casio’s security advisory published on October 5, 2024, an unidentified third-party actor gained unauthorized access to the company’s network, triggering outages and temporarily disrupting several of the company’s services.
Casio has not yet revealed the details of the impacted services. The company is working with external cybersecurity experts, and the network breach is under investigation to determine the full extent of the damage.
Casio released a statement acknowledging the breach and its potential impact, stating, “We deeply apologize for any concern and inconvenience this may cause to our customers and partners.” The company has restricted external access to its systems while the investigation is ongoing.
The threat actor behind the incident has been identified as Russian threat group Underground, which appeared for the first time only a few months ago, claimed the incident on its dark web leak site.
The threat group allegedly stole 204.9 gigabytes of data, including confidential documents, legal documents, personal employee data, confidential non-disclosure agreements, employee payroll, patent information, company financial documents, project information and “incidents”.
Additionally, while the group is reportedly a ransomware group, the data appears to have been published and is available for free download, suggesting that either negotiations fell through or the incident was not a ransomware attack in the first place.
This is not the first time Casio suffers a breach back in October 2023, caused by human error. That breach affected users in 148 countries and targeted Casio’s ClassPad education platform, which is widely used by students and educators.
