Unauthorized Access of Server at Yamaha Motor's Subsidiary in the Philippines
November 16, 2023
IWATA, November 16, 2023 - Yamaha Motor Co., Ltd. (Tokyo: 7272) announces that one of the servers managed by its motorcycle manufacturing and sales subsidiary in the Philippines, Yamaha Motor Philippines, Inc. (YMPH), was accessed without authorization by a third party and hit by a ransomware attack, and a partial leakage of employees' personal information stored by the company was confirmed.
Upon learning of the attack, the IT Center at Yamaha Motor headquarters in Japan and YMPH immediately set up a countermeasures team and have been working to prevent further damage while investigating the scope of the impacts, etc., as well as working on a recovery together with an external internet security company, but we expect it will be some time until the full extent of the damage can be confirmed.
Yamaha Motor sincerely apologizes for the inconvenience and worry this incident may cause.
The following summarizes what is known at this time:
1. Background
October 25
It was confirmed that YMPH was being hit by a ransomware attack. The same day, YMPH and the IT Center at Yamaha Motor headquarters established a countermeasures team and have been working to prevent further damage while investigating the scope of the impact, etc., and working on a recovery together with input from an external internet security company.
October 27
YMPH reported to the Philippine authorities.
November 16
It was confirmed that some employees' personal information stored by YMPH had been leaked.
2. Current situation and measures going forward
At present, servers and systems at YMPH not compromised by this attack have been restored. The attack was limited to one of the servers managed by YMPH and we have confirmed that it has not affected the headquarters or any other companies in the Yamaha Motor group. However, we will continue to closely monitor the situation while continuing our work to fully restore the systems at YMPH damaged by the attack as quickly as possible.
■Contact us from the Press
Corporate Communication Division, PR group: +81-538-32-1145
■News Center: https://global.yamaha-motor.com/news/
Upon learning of the attack, the IT Center at Yamaha Motor headquarters in Japan and YMPH immediately set up a countermeasures team and have been working to prevent further damage while investigating the scope of the impacts, etc., as well as working on a recovery together with an external internet security company, but we expect it will be some time until the full extent of the damage can be confirmed.
Yamaha Motor sincerely apologizes for the inconvenience and worry this incident may cause.
The following summarizes what is known at this time:
1. Background
October 25
It was confirmed that YMPH was being hit by a ransomware attack. The same day, YMPH and the IT Center at Yamaha Motor headquarters established a countermeasures team and have been working to prevent further damage while investigating the scope of the impact, etc., and working on a recovery together with input from an external internet security company.
October 27
YMPH reported to the Philippine authorities.
November 16
It was confirmed that some employees' personal information stored by YMPH had been leaked.
2. Current situation and measures going forward
At present, servers and systems at YMPH not compromised by this attack have been restored. The attack was limited to one of the servers managed by YMPH and we have confirmed that it has not affected the headquarters or any other companies in the Yamaha Motor group. However, we will continue to closely monitor the situation while continuing our work to fully restore the systems at YMPH damaged by the attack as quickly as possible.
■Contact us from the Press
Corporate Communication Division, PR group: +81-538-32-1145
■News Center: https://global.yamaha-motor.com/news/
