Nidec Chaun-Choung's forensic review of the June ransomware case finds no clear log evidence of data leaving the network

According to iThome, thermal module manufacturer Nidec Chaun-Choung (6230) stated in late June that some of its servers were hit by a ransomware attack, disrupting ERP and other information systems; its Japanese parent company Nidec also confirmed the incident, noting that Nidec Chaun-Choung's network infrastructure was built independently of the group, leaving the parent company and other group entities unaffected, while the Blackfield ransomware group claimed responsibility at the end of June and alleged the theft of 2 TB of internal data ^[1]. This week, Nidec Chaun-Choung announced the scope of impact regarding potential data leakage ^[1]. On August 4, Nidec Chaun-Choung issued a material announcement on the Market Observation Post System (MOPS), stating that it commissioned an external professional forensics firm to investigate screenshots of partial folder and file name lists published on the dark web by the criminal group claiming responsibility, and based on system event logs and related data, found no definitive evidence that the relevant data had been exfiltrated externally ^[1].

Industries mainly affected: Cross-industry

On August 4, Nidec Chaun-Choung issued a material announcement on the Market Observation Post System (MOPS), stating that it commissioned an external professional forensics firm to investigate screenshots of partial folder and file name lists published on the dark web by the criminal group claiming responsibility, and based on system event logs and related data, found no definitive evidence that the relevant data had been exfiltrated externally