Casio confirms customer data compromised in ransomware attack

Japanese electronics giant Casio has confirmed that a recent ransomware attack resulted in the theft of customer data , along with sensitive employee and company information. The breach, which occurred on October 5, 2024, is the latest in a series of high-profile cyberattacks targeting major corporations this year.

In an updated statement released on Friday, Casio revealed that the attackers accessed personal information belonging to employees, contractors, business partners, and job applicants. The company also confirmed that "information about some customers" was compromised, though it did not specify the types of data or number of individuals affected.

The ransomware group known as Underground has claimed responsibility for the attack on its dark web leak site. The group alleges to have stolen over 200 gigabytes of data, including legal documents, payroll information, and personal details of Casio employees.

Casio first acknowledged the cyberattack on October 7, initially describing it as a "system failure" caused by "illegal access." The company has since confirmed the incident as a ransomware attack, which has left some of its systems "unusable."

While Casio ruled out a compromise of credit card information, stating that its Casio ID and ClassPad services were unaffected, the full extent of the damage is still under investigation.

Casio has not provided specific guidance for potentially affected customers. However, it is recommended that individuals take precautionary measures such as changing passwords, enabling two-factor authentication, and monitoring their accounts for suspicious activity.