Cyber Incident Victim: Tamash
Date:
Oct 2022
Location:
Japan
Summary
A ransomware attack targeted a Japanese technology firm specializing in microelectronics and facility system equipment, impacting its operations across chemical and industrial product manufacturing, electronic materials design, pharmaceutical development, and factory systems. The LockBit 3.0 affiliate responsible exfiltrated sensitive data and threatened public release unless a ransom was paid, leveraging the victim’s critical position in global supply chains spanning manufacturing, semiconductors, automotive, communications, and healthcare sectors. The incident heightened risks of downstream disruptions to partner organizations, though no samples of the stolen data were initially published by the threat actors.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On or around October 14, 2022, affiliates of the LockBit 3.0 ransomware-as-a-service operation breached Japanese technology firm Oomiya, which specializes in microelectronics design, manufacturing, and facility system equipment. The attackers exfiltrated company data and issued a ransom demand, threatening to publish stolen information by October 20, 2022, if payment was not received. Oomiya’s operations span chemical and industrial product manufacturing, electronic materials design, pharmaceutical development, and factory manufacturing systems. LockBit affiliates publicly claimed responsibility for the attack but did not initially provide evidence of the stolen data. The incident occurred during a period of heightened LockBit 3.0 activity, with DarkFeed reporting hundreds of organizations targeted by the group’s affiliates globally. No details regarding initial attack vectors, internal detection methods, or containment procedures were disclosed in available sources.
The compromise raised significant supply chain concerns due to Oomiya’s role as a supplier to major international organizations across manufacturing, semiconductor, automotive, communications, and healthcare sectors. Potential data exposure could impact downstream clients through intellectual property theft or operational disruption. LockBit’s typical tactics involve double extortion through data encryption and leakage threats, though the group had not published Oomiya-related data samples at the time of reporting. No information regarding ransom negotiations, payment status, or incident response coordination with law enforcement or third-party cybersecurity firms was publicly available. The absence of published data samples left the validity and scope of the exfiltration claims unverified as of October 17, 2022.