A company to which NEC had outsourced systems development was hit by a cyberattack, resulting in the leakage of information on 3 customers. The attack occurred in late September. Unauthorized access to customer system environments occurred via the outsourcing provider, encrypting the servers and rendering multiple systems unavailable. NEC also confirmed that information-sharing files stored in the cloud had been leaked and is investigating their contents and impact.
NEC announced that a company to which it outsourced systems development and maintenance had been hit by a cyberattack, resulting in the leakage of information on 3 customers. The incident left customers unable to use their systems, and recovery work and an investigation into the leaked information are under way.
The outsourcing provider was attacked in late September, after which unauthorized access to customer environments occurred via the provider's devices. Files on the servers were encrypted, rendering multiple systems unavailable.
Files stored in the cloud and used for information sharing among NEC, its customers and the outsourcing provider were also leaked. These files contained customers' personal information and system-related information. Personal information leaks were confirmed at 2 of the 3 customers.
NEC said it was taking measures including lending security-management devices to the outsourcing provider.