Thursday, April 3, 2025
HomeCyber AttackSEIKO Cyber Attack: Customers Personal Data Exposed

SEIKO Cyber Attack: Customers Personal Data Exposed

Published on

SIEM as a Service

Follow Us on Google News

SEIKO Group Corporation (SGC) has announced that they suffered a cyber attack that exposed customer data. 

The attack lasted for several months and was ransomware that accessed SEIKO’s servers without permission. 

The attack was discovered on July 28, 2023, and SEIKO immediately stopped it.

SEIKO hired cybersecurity experts to investigate and report the attack to the authorities. 

They also set up an emergency team to limit the damage. After checking their servers, they discovered about 60,000 pieces of personal data from SGC, Seiko Watch Corporation (SWC), and Seiko Instruments Inc. (SII) were leaked.

SEIKO Cyber Attack 

The data included customer names, business contacts, job applicants, and staff information.

SEIKO has done several things to fix the problem and avoid future attacks. 

They cut off external communication with the affected servers and installed new systems to detect and block unauthorized activity. 

They also added more security features, such as multi-factor authentication.

SEIKO is still working with cybersecurity experts to find and fix any weaknesses in their IT systems, figure out the full extent of the data leak, understand how and why the attack happened, improve system security and monitoring, strengthen corporate governance across the Group, review their Business Continuity Plan (BCP), and get third-party assessments and other actions to prevent such incidents from happening again.

SEIKO Group Corporation apologized for the trouble caused by this data leak. 

They have contacted the affected parties individually and are ready to deal with any more leaks that may be found later. 

Protect yourself from vulnerabilities using Patch Manager Plus to patch over 850 third-party applications quickly. Try a free trial to ensure 100% security.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Cisco AnyConnect VPN Server Vulnerability Allows Attackers to Trigger DoS

Cisco has disclosed a significant vulnerability in its AnyConnect VPN Server for Meraki MX and Z...

New Trinda Malware Targets Android Devices by Replacing Phone Numbers During Calls

Kaspersky Lab has uncovered a new version of the Triada Trojan, a sophisticated malware...

DarkCloud Stealer Uses Weaponized .TAR Archives to Target Organizations and Steal Passwords

A recent cyberattack campaign leveraging the DarkCloud stealer has been identified, targeting Spanish companies...

SonicWall Firewall Vulnerability Enables Unauthorized Access

Researchers from Bishop Fox have successfully exploited CVE-2024-53704, an authentication bypass vulnerability that affects SonicWall...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Cisco AnyConnect VPN Server Vulnerability Allows Attackers to Trigger DoS

Cisco has disclosed a significant vulnerability in its AnyConnect VPN Server for Meraki MX and Z...

New Trinda Malware Targets Android Devices by Replacing Phone Numbers During Calls

Kaspersky Lab has uncovered a new version of the Triada Trojan, a sophisticated malware...

DarkCloud Stealer Uses Weaponized .TAR Archives to Target Organizations and Steal Passwords

A recent cyberattack campaign leveraging the DarkCloud stealer has been identified, targeting Spanish companies...