Cyber Threat Actor: Kamijo

The threat actor is trackedin open‑source reports under the alias Kamijo. Available information places the actor’s operational base in Japan, though no further geographic specifics are publicly confirmed. On June 14, 2023, the target organization observed unauthorized external access to its internal network. The anomalous traffic triggered an immediate security alert within the company’s monitoring systems. In response, the organization proceeded to disconnect the affected servers from the broader network infrastructure. Simultaneously, it severed all network connections linked to the compromised systems to prevent further propagation.

After completing the containment steps, the company engaged external cybersecurity experts to conduct a thorough forensic investigation. The investigation’s objectives were to identify the initial intrusion vector, determine the scope of any accessed data, and assess the potential for a data breach. Throughout the process, the organization maintained transparent communication with stakeholders and issued a public apology for the concern caused by the incident. To facilitate assistance, a dedicated contact channel was established, allowing affected individuals and partners to seek information and support. The full timeline, response actions, and investigative status were detailed in a statement released by the company on June 19, 2023. This statement, accessible via the URL https://www.kjm.co.jp/20230619-2/, constitutes the primary publicly available source documenting the activity attributed to the alias Kamijo.