Canon is hit by massive ransomware attack: 10TB of user data at risk, with doubts as to whether or not images were compromised

Camera maker Canon was hit by a major ransomware attack recently. An attack by a ransomware threat actor called “Maze” resulted in over 10TB of sensitive user data being compromised and at risk of being released in public. 

According to Canon, no user image data was compromised in the attack. However, a seemingly contradictory statement raises questions: in their statement, Canon claimed that “some” photo and video image files were “lost.” At the same time, they stated that “there was no leak of image data.” 

Whether or not actual pictures and videos were lost in the ransomware attack, over 10TB of file on Canon databases, including sensitive user information, was lost in the attack. 

In Maze’s ransomware note, the threat actor claimed that if they weren’t contacted by Canon within a week, the data they stole would be released in public. At the moment, with the lack of clarity about whether or not images were actually stolen, it’s hard to ascertain the impact this would have.