Ransomware Breach Affects 39,000 People, Reports Kyocera AVX

Kyocera AVX Components Corporation (KAVX) has initiated notifications to individuals, informing them of a data breach that affected 39,111 people as a result of a ransomware attack. KAVX, a subsidiary of the Japanese semiconductor giant Kyocera, is an American company specializing in advanced electronic components, boasting a substantial workforce of over ten thousand experts and an annual revenue of $1.3 billion.

According to the breach notification, KAVX became aware on October 10, 2023, that hackers had infiltrated their systems between February 16 and March 30, 2023. The cyber incident impacted servers in South Carolina, USA, resulting in the encryption of a limited number of systems and temporary disruption of specific services.

KAVX's subsequent investigation revealed that the compromised servers contained personal data of individuals worldwide, including, at minimum, full names and Social Security Numbers (SSNs). While further exposed details were not specified in the public notice, the company clarified that they're taking precautions and offering 12-month dark web monitoring and password leak services for the affected individuals to mitigate potential risks of identity theft or fraud.

Although KAVX has no evidence of the stolen data being misused, they emphasize the importance of vigilance among the affected individuals in safeguarding their personal information.

LockBit ransomware perpetrators asserted their involvement in the breach of KAVX on May 26, 2023, announcing the company's compromise on their data leak site. The threat actors exhibited various extracted data samples on their extortion portal, comprising passport scans, financial records, non-disclosure agreements, and additional materials. The hackers imposed a deadline of June 9, 2023, for KAVX to fulfill the ransom demand.

Of significant concern, LockBit also disclosed component schematics and technical drawings, raising the potential for exposing proprietary designs and patented information to competitors.