Canon Suffers Ransomware Attack

Just one week after the multi-million attack on Garmin

Ransomware attacks have been a consistent problem lately. Only a week after Garmin paid out millions of dollars to hackers, Japanese tech firm Canon is reportedly dealing with a similar situation. According to BleedingComputer, 10TB of company data has been stolen and at least 24 of domains owned by the company are experiencing system outages – including the US website.

In a screenshot obtained by BleedingComputer, a company-wide notification titled “Message from IT Service Center” was sent at around 6 AM this morning from Canon’s IT department, stating that Canon is experiencing “widespread system issues affecting multiple applications, Teams, Email, and other systems may not be available at this time”.

BleedingComputer has also allegedly obtained screenshots from the ransom note sent to Canon, which read:

“We hacked your network and now all your files, documents, photos, databases and other important data are safely encrypted with reliable algorithms.

“You cannot access the files right now. But do not worry. You can get it back! It is easy to recover in a few steps. We have also downloaded a lot of private data from your network, so in case of not contacting us as soon as possible this data will be released.

“If you do not contact us in 3 days we will post information about your breach on our public news website and after 7 days the full downloaded info”.

The note goes on to reference several other attacks by Maze, who seem to be the ones behind this one. Maze told BleedingComputer that they stole “10 terabytes of data, private databases etc” this morning, but declined to share further info including proof of the stolen data and the ransom amount.

In a comment to both BleedingComputer and The Verge, Canon said that they were “investigating the situation”.