Liputan6.com, Jakarta Japanese electronics manufacturer, Casio, confirmed that a ransomware attack that occurred in October 2024 had leaked the personal data of around 8,500 people.
Those affected were mostly Casio employees and business partners, but a small amount of customer data was also exposed.
This cyber attack occurred on October 5, 2024, when the perpetrator used the technique phishing to infiltrate corporate networks and paralyze IT systems. This is as quoted from Bleeping ComputerFriday (10/1/2025).
A ransomware group called Underground later claimed the attack on October 10. They threatened to leak confidential documents, financial data, project information and employee data if the ransom was not paid.
Casio immediately confirmed that Underground had stolen the personal data of employees, business partners and customers. However, at that time the company had not provided the exact number of people affected.
After the investigation has been completed, Casio can now reveal the scope of the data leak in detail. The following are details of the data exposed based on company announcements:
- Employees (6,456 people): Name, employee number, email address, affiliation, gender, date of birth, family details, home address, telephone number, NPWP, and head office system account information.
- Business Partners (1,931 people): Name, email address, telephone number, company name, company address, and some have identity card information.
- Customers (91 people): Shipping address, name, telephone number, purchase date, and product name for items requiring delivery and installation. Apart from personal data, internal company documents such as invoices, contracts and meeting materials were also stolen.
Casio will send personal notifications to parties affected by this cyber attack.