デジタルテクノロジー株式会社

Summary

A Japanese technology company discovered that its systems had been compromised by an unauthorized third party, leading to service disruptions affecting some servers and PCs. The incident triggered an internal outage, prompting the organization to isolate affected systems from the internet and internal network while engaging an external security firm to investigate the scope and cause of the breach. Preliminary findings indicated that information held by the company, including personal and confidential data, may have been exposed, though specific details remained under investigation. The organization reported the matter to law enforcement and the Personal Information Protection Commission, established an emergency response headquarters, and was working toward restoring internal systems and resuming normal operations while providing updates to affected customers and stakeholders.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

デジタルテクノロジー株式会社 confirmed on February 27, 2025, that its systems had been subjected to unauthorized access by a third party, resulting in a potential data breach affecting both personal and confidential information held by the company. The disclosure was issued by Toshiaki Kibe, Representative Director of the company, and addressed to customers and stakeholders. The company issued a formal apology for the concern and inconvenience caused by the incident and indicated that an investigation was underway to determine the full scope and cause of the breach.

The underlying incident was first detected on February 17, 2025, when the company experienced a system disruption that caused some services to become unavailable. Digital Technology Co. engaged an external cybersecurity firm to investigate the cause of the disruption, and through that investigation, the presence of unauthorized access to company systems was confirmed. As an immediate containment measure, the affected servers and certain PCs were isolated from both the internet and the company's internal network. The impact of the incident was significant enough to render portions of the company's internal systems unusable while the broader investigation proceeded. The company stated that it was working to restore the affected internal systems and resume normal business operations as quickly as possible.

In parallel with the containment and recovery efforts, Digital Technology Co. initiated an investigation, with the support of the external cybersecurity firm and other specialists, to identify the specific information that may have been leaked. The company noted that it was reporting to relevant authorities as necessary and committed to disclosing additional information promptly if material findings emerged during the course of the investigation. The company also confirmed that it had filed a report with the Personal Information Protection Commission and had consulted with law enforcement regarding the matter.

The company established an emergency response headquarters to coordinate its handling of the incident and provided contact information for inquiries. Stakeholders were directed to contact the Emergency Response Headquarters Secretariat at the company's offices in Arakawa-ku, Tokyo, by telephone or email. The company indicated that normal business operations were disrupted and that customers and partners should expect inconvenience until systems were fully restored. At the time of the disclosure, the company was still in the process of determining the full extent of the impact and the precise cause of the unauthorized access, and further updates were anticipated as the investigation advanced.

Sources

Sources available to members: 1 source.