Advantest Corporation

Summary

Advantest Corporation, a Japanese supplier of semiconductor test equipment, detected unusual activity in its IT environment and promptly activated its incident response protocols, isolating affected systems and engaging third‑party cybersecurity experts. Preliminary findings indicate that an unauthorized third party gained access to portions of the network and deployed ransomware, though the company has not confirmed any compromise of customer or employee data nor identified a responsible ransomware group. The investigation remains ongoing, with the company stating it will provide updates and notify affected individuals if data impact is confirmed.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Advantest Corporation, a Japanese technology company headquartered in Tokyo with over 7,500 employees and offices in Munich and San Jose, is a global supplier of semiconductor test equipment used in 5G communications, IoT devices, autonomous vehicles and high‑performance computing systems. On February 15, 2026, the company detected unusual activity within its IT environment and immediately activated its incident response protocols, which included isolating affected systems and engaging leading third‑party cybersecurity experts to assist with investigation and containment. Advantest employs approximately 7,600 people, reports annual revenue exceeding $5 billion and a market capitalization of about $120 billion, and describes itself as a leader in semiconductor test solutions. The firm’s preliminary findings indicated that an unauthorized third party may have gained access to portions of its network and deployed ransomware.

On February 19, 2026, Advantest publicly disclosed that it was responding to a ransomware attack that may have impacted certain systems within its network, stating that it was dedicated to transparency and would provide regular updates as the investigation progressed. The company said that if its investigation determined that customer or employee data had been affected, it would notify impacted persons directly and provide guidance on protective measures. As of the latest updates available through February 23, no data breach had been confirmed and no ransomware group had claimed responsibility for the attack. Advantest noted that it had not confirmed which specific IT services were compromised with ransomware or how the incident could affect its services or customers.

The investigation remained ongoing, with the company continuing to work with external cybersecurity specialists and reviewing the potential business and financial impact of the incident. No technical indicators such as malware samples, hashes or forensic artifacts had been released as of February 20, and the specific initial access vector—whether phishing, vulnerability exploitation or credential abuse—had not been disclosed. Advantest committed to making prompt announcements if material effects were identified and to notifying affected individuals directly should data compromise be confirmed. The company also stated that it would continue to provide updates through its official news page as new information became available.

As of the latest reporting, no regulatory filings or law enforcement advisories related to the incident had been published, and Advantest maintained that it was cooperating with authorities and adhering to regulatory requirements while the investigation proceeded. The incident highlighted the persistent cyber risks facing the global semiconductor supply chain, with Advantest emphasizing its focus on containment, forensic investigation and reinforcement of security defenses. The company’s response included immediate isolation of affected systems, activation of incident response protocols and engagement of third‑party experts for ongoing analysis. Advantest affirmed that it would continue to monitor the situation and share verified details as they emerged.

Sources

Sources available to members: 3 sources.