Fujitsu customer data is reportedly being sold on the dark web

By Mayank Sharma
published

But Fujitsu believes the data wasn’t stolen during the ProjectWEB compromise

Data leak
(Image credit: Shutterstock/dalebor)

Japanese tech giant Fujitsu has reportedly confirmed that the stolen data (opens in new tab) being sold on the dark web (opens in new tab) relates to its customers, even as it appears to downplay the incident.

ZDNet reports that the data has been posted by the Marketo group, which breaks into corporate networks much like a ransomware (opens in new tab) operator, but only exfiltrates the data without encrypting the systems.

Marketo claims it has over 4GB of confidential Fujitsu data, such as customer information, company data, budget data, reports and other company documents including information on projects.

TechRadar needs yo...

We're looking at how our readers use VPNs with streaming sites like Netflix so we can improve our content and offer better advice. This survey won't take more than 60 seconds of your time, and we'd hugely appreciate if you'd share your experiences with us.

>> Click here to start the survey in a new window (opens in new tab) <<

"We are aware that information has been uploaded to dark web auction site 'Marketo' that purports to have been obtained from our site. Details of the source of this information, including whether it comes from our systems or environment, are unknown," a Fujitsu spokesperson told ZDNet.  

New campaign

The Fujitsu spokesperson said that there was no indication that the data being sold by Marketo had anything to do with the ProjectWEB compromise earlier this year. 

Back in May, in a campaign similar to a supply-chain attack, hackers gained access to Fujitsu's project management (opens in new tab) platform, called ProjectWEB to leak data from various Japanese government offices.

One of the organizations whose data was leaked was the Japanese government’s National Center of Incident Readiness and Strategy for Cybersecurity (NISC), which has performed the cybersecurity (opens in new tab) drill for the Olympics organizers and later confirmed (opens in new tab) that its data was exposed in the Fujitsu attack.

“I assume that you may recall the last event of ProjectWEB in May, but there is no indication that this includes information leaked from ProjectWEB, and we believe that this matter is unrelated,” Fujitsu told ZDNet.

Marketo initially claimed that the data it has posted attracted 280 bids, though reports claim it currently only lists 70 bids. 

Via ZDNet (opens in new tab)

Mayank Sharma
Mayank Sharma

With almost two decades of writing and reporting on Linux, Mayank Sharma would like everyone to think he’s TechRadar Pro’s expert on the topic. Of course, he’s just as interested in other computing topics, particularly cybersecurity, cloud, containers, and coding.

See more Computing news