Mazda Motor Corporation disclosed that unauthorized access to a warehouse management system handling parts procured from Thailand exposed 692 records containing employee and business partner user IDs, full names, email addresses, company names, and business partner IDs, with no customer data affected. The company reported the incident to Japan’s Personal Information Protection Commission, implemented security measures and an external investigation, and warned impacted individuals to remain vigilant for phishing; no ransomware group has claimed responsibility, though Clop later posted Mazda domains. #Mazda #Clop
Keypoints
- Unauthorized access was detected in December on a warehouse management system for parts from Thailand.
- The breach affected 692 records containing employee and business partner information, not customer data.
- Mazda reported the incident to the Personal Information Protection Commission and engaged external specialists to investigate.
- Security measures included reducing internet exposure, applying patches, increasing monitoring, and tightening access controls.
- No ransomware group has claimed responsibility, though Clop later listed Mazda-related domains on its leak site.