Computing: Canon confirms it had been hit by major ransomware attack, customer data stolen

Computing: Canon confirms it had been hit by major ransomware attack, customer data stolen

Maze ransomware group is liable for the cyberattack that occurred back in August

(Image credit: Canon)

After suffering a cyberattack back in August, Canon has finally publicly confirmed that the attack was caused by ransomware and therefore the cybercriminals responsible stole data from its company servers.

The camera manufacturer's IT department issued a notice to staff on August 5 explaining that the corporate was suffering “widespread system issues affecting multiple applications, Teams, email, and other systems”, but didn't offer further explanation.

Canon then conducted an investigation into the incident and located evidence of unauthorized activity on its network between July 20 and Transfiguration. consistent with the corporate, the attackers had managed to access its file servers which also hosted “information about current and former employees from 2005 to 2020 and their beneficiaries and dependents”.

Based on a partial screenshot of the ransom note obtained by BleepingComputer, it had been clear that the Maze ransomware group was responsible. Then shortly after the attack, the group reached bent the news outlet to tell them that that they had stolen 10TBs of knowledge from Canon.

Stolen employee data

In a recent notice of knowledge security incident, Canon confirmed that data accessed by the cybercriminals behind the August cyberattack included the names, Social Security numbers, dates of birth, driver's license numbers, checking account numbers, and electronic signatures of its current and former employees.

Although the corporate is simply making this information public now, it did inform its employees of the matter via an indoor security notice that was sent out just after the attack on Transfiguration.

The Maze ransomware group is liable for a variety of cyberattacks against large organizations including LG, Xerox, Allied Universal, Southwire, City of Pensacola, and Canon. However, earlier this month on All Saints' Day, the group formally pack up its operations which had began a few years and a half earlier in May of 2019.

Current and former Canon employees suffering from the incident can reach bent Equifax, Experian, and TransUnion as they're all providing fraud protection services for victims of the cyberattack.

Source URL