Fujikura Compromised via Maintenance Contractor VPN, Server Data Exfiltration Discovered

According to Security NEXT, Fujikura announced that on July 2, 2024, it discovered unauthorized external access via a network maintenance VPN managed by NTT Communications ^[1]. Forensics uncovered traces of external access and data exfiltration across multiple servers at its Sakura Works, potentially exposing personal data of customer contacts as well as group employees and their family members ^[1]. Potentially affected data includes names, addresses, phone numbers, email addresses, and certain HR or bank account details, with the report citing VPN management deficiencies and vulnerability exploitation ^[1].

Industries mainly affected: Manufacturing

Potentially affected data includes names, addresses, phone numbers, email addresses, and certain HR or bank account details, with the report citing VPN management deficiencies and vulnerability exploitation ^[1].