Fujitsu cyber breach: Customers’ data compromised

TLDR:

• Fujitsu Limited disclosed a cyberattack that exposed customers’ personal information.
• The breach was caused by sophisticated malware that infiltrated the company’s internal network in Japan.

Fujitsu Limited recently announced the results of an investigation into a cyberattack that exposed customers’ personal information. The breach, which was first detected on March 15, 2024, was the result of sophisticated malware that infiltrated the company’s internal network in Japan. The malware was first discovered on several work PCs, prompting the immediate disconnection of affected computers and an increase in monitoring on other devices to prevent further spread. An investigation conducted by Fujitsu and external cybersecurity experts revealed that the malware infected a total of 49 computers within the company’s network. While there is no evidence to suggest that customer environments were accessed or that the breach extended beyond Japan, some files containing personal and business-related information were copied and potentially exfiltrated by the malware. Fujitsu has taken immediate and long-term measures to address the breach, including isolating and reinitializing affected computers, blocking external connections, and enhancing security monitoring. The company has notified affected customers and reported the incident to Japan’s Personal Information Protection Commission. Despite no reported misuse of the compromised data, Fujitsu is committed to strengthening its information security measures to prevent future breaches.