Cyber Incident Victim: Casio
Date:
Oct 2024
Location:
Japan
Summary
A cyberattack on a Japanese tech manufacturer caused system failures and service disruptions, with unauthorized network access prompting an ongoing investigation involving external specialists to assess potential data leaks. The incident resulted in the exposure of customer information including names, email addresses, countries of residence, order details, service usage data, and payment methods—excluding credit card details—affecting 91,921 items in Japan and 35,049 internationally, though the classification of "items" remains undefined. This follows a prior breach involving the company's education platform that compromised data from customers across 148 countries. Security measures like external access restrictions were implemented, and authorities were notified, though attack specifics such as ransomware involvement or perpetrator identification remain undisclosed.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On October 5, 2024, Japanese technology manufacturer Casio experienced a cyberattack that caused a system failure, rendering certain customer services unavailable. The company publicly disclosed the incident on the same day, confirming unauthorized network intrusion but did not specify which customer-facing systems were disrupted. Upon detecting the breach, Casio immediately implemented containment measures including external access restrictions and notified relevant authorities. The company engaged external cybersecurity specialists to investigate both the attack's technical details and whether personal or critical data was exfiltrated. This incident occurred almost exactly one year after Casio's 2023 breach of its ClassPad.net education platform, which compromised information from users across 148 countries.
The investigation revealed that attackers accessed customer information including names, email addresses, countries of residence, order histories, service usage records, and payment method details, though credit card data remained secure. Casio reported 91,921 compromised "items" belonging to Japanese customers and 35,049 items from international customers, without defining the term "item" operationally. This follows the 2023 incident where hackers leaked over 120,000 data pieces from 1,108 educational institutions and an undisclosed number of individual users. While the company confirmed implementing enhanced security protocols after both breaches, it declined to specify whether the 2024 attack involved ransomware demands or attacker identification. Casio's financial disclosures noted $440 million in recent quarterly sales amid a decade-long revenue decline, though the direct business impact of the cyberattacks remains unquantified. The forensic review and regulatory reporting processes remain ongoing as of the latest public statement.