Fujitsu

Summary

Fujitsu experienced a cybersecurity incident involving malware detected on multiple business computers, potentially leading to unauthorized access and exfiltration of files containing personal and customer information. The company isolated affected systems, enhanced monitoring of other devices, and initiated investigations to determine the intrusion method and scope of data exposure. It notified potentially impacted individuals and customers, reported the incident to relevant data protection authorities, and stated there were no confirmed cases of information misuse at the time of disclosure. The breach occurred amid existing scrutiny of the company's cybersecurity practices following prior controversies.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On March 1, 2024, Fujitsu publicly disclosed a cybersecurity incident involving the discovery of malware on multiple company work computers. An internal investigation revealed that files containing personal information and customer data were potentially exfiltrated through unauthorized access. The malware’s presence prompted immediate containment measures, including disconnecting affected computers from the network and enhancing monitoring protocols for other business systems. Fujitsu initiated a forensic investigation to determine the intrusion vector, the timeline of the malware’s activity, and the scope of data compromise. The company reported the incident to Japan’s Personal Information Protection Commission as a precautionary measure due to the risk of personal information exposure. Direct notifications were sent to individuals and customers whose data might have been compromised, though Fujitsu did not specify whether affected parties were employees, corporate clients, or both. No technical details about the malware family, attack methodology, or exact data types were disclosed publicly. The investigation remained ongoing at the time of the announcement, with no conclusive evidence confirming external data leakage or misuse.

Fujitsu emphasized operational continuity despite the breach, implementing additional security controls to prevent further unauthorized access. The company acknowledged the incident caused significant concern among stakeholders and issued a formal apology for the disruption, though no operational downtime or financial impact was specified. No ransomware claims or external threat actors were referenced in Fujitsu’s statements. Third-party cybersecurity firms or law enforcement involvement were not mentioned in the available disclosures. As of the reporting date, Fujitsu confirmed no instances of malicious use of the potentially exfiltrated data had been detected. The incident occurred against a backdrop of heightened scrutiny of Fujitsu’s cybersecurity practices following unrelated controversies, though no causal link between prior events and this breach was established. Fujitsu’s public communications focused on remediation transparency while withholding technical and tactical details about the attack.

Sources

Sources available to members: 4 sources.