Fujitsu Cybersecurity Breach: Malware Detected, Massive Data at Risk

Fujitsu acknowledged a cyberattack incident and warned of possible data theft.

The Japanese multinational tech company stated on its website that it confirms the "presence of malware on multiple work computers at our company, and as a result of an internal investigation, we discovered that files containing personal information and customer information could be illegally taken out."

Fujitsu immediately removed malware-infected computers from its network. The business is investigating how its network was penetrated and possible data leakage.

The Tokyo-based company did not specify the malicious software or hack, but it stressed the gravity of the problem and its commitment to resolving the data breach incident.

Severity of The Data Leak

The tech firm, widely known for its information and communications technology equipment and services, did not specify the victims or the types of data taken, including whether the Fujitsu Cybersecurity Breach affected workers, business customers, or civilians using the company's technology, per TechCrunch.

Fujitsu is the sixth-largest IT services firm in the world, with 124,000 workers and $23.9 billion in sales. Due to Fujitsu's Horizon software faults, it was recently criticized for wrongful convictions of several UK Post Office workers.

Fujitsu notified Japan's Personal Information Protection Commission of the occurrence to prevent data theft. However, it has not been said whether other relevant entities, including the US, have received comparable allegations.

According to BleepingComputer, Fujitsu's ProjectWEB information-sharing technology was used to hack numerous Japanese government organizations' offices in May 2021, stealing 76,000 email addresses and confidential data.

The stolen data from the Fujitsu Cybersecurity Breach included sensitive information from government systems and potentially air traffic control data from Narita International Airport.

Subsequent investigations concluded in December 2021 showed that hackers leveraged stolen ProjectWEB credentials to achieve the breach. Later, a new information-sharing tool with zero-trust security measures replaced ProjectWEB, which had several vulnerabilities discovered during the investigation.

Fujitsu Faces Another Controversy in The UK

In a separate development, Fujitsu, implicated in the Post Office Horizon scandal in the United Kingdom, is revealed to be continuing to manage a confidential UK military system despite its government contract expiring two years ago.

According to The Telegraph, the major tech company oversees a secretive military computer system crucial for the "strategic command and control of the UK armed forces."

Delays in transitioning the contract to another firm are due to Fujitsu's strong government ties and concerns over security clearances for incoming staff. Recent delays in security vetting have led to costly extensions despite government reservations about Fujitsu's conduct post-scandal.

The company's longstanding relationship with the UK Ministry of Defence spans nearly five decades, providing IT support for military operations, including nuclear submarines. However, following public scrutiny, Fujitsu faces government disassociation.

A 2019 High Court ruling confirmed errors in the Fujitsu Horizon software, leading to wrongful convictions of innocent postmasters.

Earlier this year, Fujitsu told the Cabinet Office that it would not compete for UK public contracts during the Post Office crisis probe. However, a February Treasury Committee report stated that Treasury-affiliated public entities have had almost £3.4 billion ($4.33 billion) in Fujitsu contracts since 2019.

In January, business European director Paul Patterson told MPs that the corporation was "truly sorry" for the debacle and had taken responsibility for the "appalling miscarriage of justice."