Casio confirms data leak while assuring customers that all payment data is safe

Last October, Casio's education web service ClassPad.net was affected by a data leak that involved personal information of customers from no less than 148 countries. This month, while ClassPad.net and Casio ID were both not targeted, Casio admitted to a ransomware attack that exposed a quite comprehensive set of data related to the company's employees, job candidates, and customers.

Last Monday, Casio revealed that the company's network "had been accessed by a third party in an unauthorized manner" without mentioning anything about the data leak involved. Yesterday, the Underground ransomware group leaked data allegedly stolen from Casio on its dark web portal. Shortly after, Casion confirmed that the following information was stolen, at least partially:

• Personal data of permanent and temporary employees of both Casio and affiliated third parties.
• Legal, financial, human resources planning, audit, sales, and technical documents related to both Casio and its affiliates.
• Personal information related to Casio's business partners and affiliates.
• Invoices and sales-related financial data.
• Personal data of individuals who were previously interviewed for employment with Casio.
• Contract-related information with present and former business partners.

The silver lining of this dark cloud is that, according to Casio, the exposed information does not include credit card information. For the time being, Casio and the authorities are still busy finding out exactly what data was affected and to mitigate the effects of the breach.

In case they missed it so far (it was released in March 2022), those involved in providing security to large businesses should check out Jeremy Wittkop's The Cybersecurity Playbook for Modern Enterprises: An end-to-end guide to preventing data breaches and cyber attacks. This book currently goes for $22.39 in Kindle format, and the paperback edition is priced at $42.27 (no discounts involved).