Hanwa Co. Discloses Suspected Ransomware Attack on Thai Subsidiary Servers

Hanwa Co., Ltd. announced that servers and PCs at its Thai subsidiary, Hanwa Thailand Co., Ltd., were subjected to unauthorized third-party access on September 14, 2024 in a suspected ransomware attack ^[1]. The company shut down and reinitialized affected systems, reported the matter to local police and system service providers, and discovered that a shared group file server had also been accessed ^[1]. The investigation found no definitive evidence of data exfiltration, and the company stated it would individually notify affected business partners based on the scope of impact ^[1].

Industries mainly affected: Manufacturing

The investigation found no definitive evidence of data exfiltration, and the company stated it would individually notify affected business partners based on the scope of impact ^[1].