Cyber attack on Hoya

Hoya, a Japanese specialist in optical instruments, medical devices and electronic components with 160 offices in over 30 countries and a network of 43 laboratories worldwide, was most likely the target of a major cyber-attack in March. The incident severely impacted the company's production and order fulfillment, with several business units affected by IT outages.

A week ago, the company announced that it had suffered a cyberattack that may have led to unauthorized access or exfiltration of sensitive data. So far, however, it is unclear whether any data has actually been stolen. Investigations are still ongoing.

According to independent reports, the ransomware group "Hunters International" has made a ransom demand of 10 million dollars. This sum is intended to secure the release of a file decryption tool and the non-publication of allegedly 1.7 million stolen files - which corresponds to around 2 TB of data.

Corporate response

So far, as far as is known, no files have been published on the "Hunters International" website and the threat actors have not publicly claimed responsibility for the attack on Hoya. However, there are indications that the demands are not just a threatening gesture by the ransomware gang. The company has not released any updates on the status of its operations since April 4, 2024, so it is assumed that production is still impacted and remediation efforts are ongoing.

Conclusion

The situation underscores the critical need for companies to implement comprehensive cybersecurity measures and stay up-to-date with the latest technology to protect themselves against such advanced threats. The attack on Hoya is further proof that cybercriminals know no boundaries and will not spare even critical infrastructure.

Source: cybersecurity-news.com