Nippon Steel Solutions confirmed hackers breached its systems by exploiting a zero-day vulnerability in network equipment, potentially exposing customer, partner, and employee data. The stolen information may include names, job titles, email addresses, and phone numbers, though the company hasn't found the data circulating on dark web markets yet.
NS Solutions has isolated affected devices, restricted external network access, and is contacting individuals under Japan's Personal Information Protection Act. The breach follows a separate February incident where the BianLian ransomware group claimed to steal data from Nippon Steel USA, though it's unclear if the attacks are connected.
Source: Dark Reading