IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

Toshiba hit by ransomware in suspected DarkSide attack

Toshiba Tec Corp hit by the same hackers that targetted the Colonial Pipeline Company

A French business belonging to Toshiba has been hit by a ransomware attack which the company says is from the same group that carried out the Colonial Pipeline attack this week.

Toshiba Tec Corp, which makes office and electrical machinery, said today it had been hacked by DarkSide, according to Reuters. This is the same group that the FBI has blamed for the Colonial Pipeline attack in the US.

Little is known at this stage as to how much damage has been caused, however, the company said in a press release that the extent of the impact has been limited to some regions in Europe, but Toshiba Tec is still investigating whether customer-related information was leaked externally.

"As far as the investigation result shows, the group recognises that it is possible that some information and data may have been leaked by the criminal gang," it said in a statement. 

The group took actions to stop the networks and systems operating between Japan and Europe as well as those between European subsidiaries to prevent the spread of the damage. It also said that once its data backup is completed, it will deploy recovery measures.

Websites used by the DarkSide group claimed on Wednesday to have attacked three additional unnamed companies, according to CNBC. Shortly before these sites were taken offline, the group posted information they claimed related to the hacks, but this did not include leaked data.

Related Resource

Cost of a data breach report 2020

Find out what factors help mitigate breach costs

cost of a data breach report 2020 - whitepaper from IBMDownload now

One company is a US-based technology services reseller that the group claims to have stolen 600GB of sensitive information from, while another is a Brazilian renewable energy reseller from which 400GB of data was stolen, including “personal data of clients”.

The third is a Scottish construction company from which DarkSide claims to have stolen 900GB, including contracts and personal data.

On Thursday, the Colonial Pipeline company admitted to paying the Eastern European hackers $5 million, despite reports earlier this week stating that the firm had no intention of paying the ransom.

The company reportedly paid the ransom in virtually untraceable cryptocurrency in exchange for a decryption tool to unlock its computer systems. However, it's believed the tool took too long to revert the encryption, and that the company was forced to rely on backups to fully restore its systems.

US government officials were also reportedly aware that Colonial Pipeline had paid the ransom to keep fuel stations open and planes fuelled in southeastern cities. Despite this, the incident has caused fuel shortages in North and South Carolina, Georgia, Virginia, and Florida.

Featured Resources

Accelerating AI modernisation with data infrastructure

Generate business value from your AI initiatives

Free Download

Recommendations for managing AI risks

Integrate your external AI tool findings into your broader security programs

Free Download

Modernise your legacy databases in the cloud

An introduction to cloud databases

Free Download

Powering through to innovation

IT agility drive digital transformation

Free Download

Recommended

Darktrace AI’s Antigena helps stop ransomware attack at Dordogne GHT
ransomware

Darktrace AI’s Antigena helps stop ransomware attack at Dordogne GHT

13 Apr 2022
Sabbath hackers are targeting US schools and hospitals
ransomware

Sabbath hackers are targeting US schools and hospitals

29 Nov 2021
Out-of-hours ransomware attacks have a greater impact on revenue
ransomware

Out-of-hours ransomware attacks have a greater impact on revenue

18 Nov 2021
US and Israel join forces to fight ransomware
ransomware

US and Israel join forces to fight ransomware

15 Nov 2021

Most Popular

Former Uber security chief to face fraud charges over hack coverup
data breaches

Former Uber security chief to face fraud charges over hack coverup

29 Jun 2022
Macmillan Publishers hit by apparent cyber attack as systems are forced offline
Security

Macmillan Publishers hit by apparent cyber attack as systems are forced offline

30 Jun 2022
FCC commissioner urges Apple and Google to remove TikTok from app stores
data protection

FCC commissioner urges Apple and Google to remove TikTok from app stores

29 Jun 2022