Cyber Crime

Japanese Pharmaceutical giant Eisai hit by a ransomware attack

This week, the Japanese pharmaceutical giant Eisai has taken its systems offline in response to a ransomware attack.

Eisai is a Japanese pharmaceutical company with about 10,000 employees and more than $5 billion in revenue. The company this week was forced to take certain systems offline in response to a cyber attack

In response to the ransomware attack, the company immediately established an internal task force and launched an investigation into the security incident. Eisai announced it is working to recover the impacted systems and determine the scope of the security breach. The company also notified law enforcement.

“A ransomware incident that encrypted some of Eisai Group’s servers was detected late night on Saturday, June 3, Japan time. We immediately implemented our incident response plan and launched an investigation with the aid of our cybersecurity partners.” reads a notification of ransomware incident published on the company’s website. “A company-wide task force was convened to rapidly work on response procedures.”

The attack was discovered on June 3, 2023, after threat actors encrypted multiple servers in Japan and abroad. The attack also impacted logistics servers, while the company’s corporate websites and email systems remain operational.

The company is investigating the possibility of a data breach, however, the notification of the incident doesn’t provide details about the attack such as the ransomware family that infected Eisai systems.

At the time of this writing, no ransomware group has claimed responsibility for the ransomware attack.

“Any potential impact of this incident on the consolidated earnings forecast of this fiscal year is currently under careful examination,” concludes the company’s notification.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, ransomware)

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.

Recent Posts

North Korea-linked IT workers infiltrated hundreds of US firms

The U.S. Justice Department charged five individuals, including a U.S. woman, for aiding North Korea-linked…

15 hours ago

Turla APT used two new backdoors to infiltrate a European ministry of foreign affairs

Russia-linked Turla APT allegedly used two new backdoors, named Lunar malware and LunarMail, to target…

1 day ago

City of Wichita disclosed a data breach after the recent ransomware attack

The City of Wichita disclosed a data breach after the ransomware attack that hit the…

2 days ago

CISA adds D-Link DIR router flaws to its Known Exploited Vulnerabilities catalog

CISA adds two D-Link DIR-600 and DIR-605 router vulnerabilities to its Known Exploited Vulnerabilities catalog. The…

2 days ago

CISA adds Google Chrome zero-days to its Known Exploited Vulnerabilities catalog

CISA adds two Chrome zero-day vulnerabilities to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity…

2 days ago

North Korea-linked Kimsuky APT attack targets victims via Messenger

North Korea-linked Kimsuky APT group employs rogue Facebook accounts to target victims via Messenger and deliver malware.…

2 days ago

This website uses cookies.