Sumitomo Bakelite North America

Summary

A U.S. subsidiary of Sumitomo Bakelite experienced a cyberattack, prompting immediate response efforts with external experts to investigate the incident's scope and impact. The subsidiary notified U.S. authorities and maintained full cooperation with ongoing investigations. Initial findings confirmed the attack was contained to certain U.S.-based group entities, with no operational impact on the parent company or other group divisions. The organization acknowledged prior security measures but committed to reviewing and strengthening existing data protection and cybersecurity policies following the incident.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On December 21, 2022, Sumitomo Bakelite North America, a U.S. subsidiary of Sumitomo Bakelite Co., Ltd., confirmed it had been targeted in a cyberattack. The parent company publicly disclosed the incident on December 1, 2022, through an official notice. Upon detecting the attack, the U.S. subsidiary immediately initiated response protocols by engaging external cybersecurity experts to assist with containment and forensic analysis. The company simultaneously notified relevant U.S. authorities about the breach in compliance with regulatory obligations. Initial investigations confirmed the compromise was restricted to certain operational segments within the U.S. subsidiary network. No evidence indicated lateral movement to Sumitomo Bakelite's Japanese headquarters or other international divisions. The organization maintained continuous cooperation with U.S. law enforcement and regulatory bodies throughout the investigation phase.

Forensic analysis confirmed the attack's operational impact remained geographically confined to North American entities within the corporate structure. Sumitomo Bakelite acknowledged existing security measures proved insufficient to prevent the breach despite prior implementation. In response, the organization committed to comprehensively reviewing and enhancing data protection policies and cybersecurity controls across all subsidiaries. The company established a dedicated communication channel ([email protected]) for stakeholders seeking incident-related information. No data exfiltration, ransomware deployment, or specific attacker methodologies were disclosed in available public statements. Business continuity measures ensured no disruption to parent company operations or non-U.S. group entities throughout the incident lifecycle.

Sources

Sources available to members: 1 source.