Science & Tech · Cybersecurity · 2 hrs ago
Cyberattack on NEC contractor disrupts systems and exposes customer data
NEC said a cyberattack on a system-development contractor in late September affected several of its customers.
The contractor worked on system development and maintenance for NEC, a Japanese technology company.
The attackers used stolen login credentials to access customer systems through the contractor’s devices.
Files were encrypted, leaving several systems unavailable, and information stored in shared cloud storage was also exposed.
NEC said the leaked files included customers’ personal and system information; one report said information from three customer companies was involved.
The incident matters because an attack on a supplier affected multiple customers and exposed sensitive data.
NEC says it is tightening contractor and data controls and lending contractors devices managed by NEC to help prevent a repeat.
NEC said a cyberattack on a contractor caused system disruptions and information leaks affecting multiple customers.
The attack took place in late September, when attackers used stolen login credentials to access customer systems.
Files on customer servers were encrypted, making several systems unavailable.
Leaked files included customer personal information and system-related information.
NEC said it is lending contractors company-managed devices and strengthening oversight to prevent a recurrence.
- Who
- A contractor that handles system development and maintenance for NEC was attacked, affecting NEC customers.
- What
- Attackers used stolen account credentials to access customer systems, causing service disruptions and information leaks.
- When
- The attack occurred in late September. NEC announced the incident on October 20, 2026.
- Where
- Not stated.
- Why
- Not stated.
This story does not have two clearly opposing sides.
The contractor was attacked, and stolen account credentials were used to access customer systems.
NEC announced that the incident had caused system disruptions and information leaks.
- Attack timing
- Late September 2026
- Affected customers
- Three customer companies, according to Sankei News
- Credentials
- Stolen valid account credentials were used to gain access
- Impact
- Customer server files were encrypted and multiple systems became unavailable
- Leaked data
- Personal information and system-related information
- NEC response
- Company-managed devices are being lent to contractors
4 sources
What people are saying
We take this incident seriously and will further strengthen and thoroughly implement contractor management and personal information management to prevent a recurrence
We take this incident seriously and will further strengthen and thoroughly implement contractor management and personal information management to prevent a recurrence