Japanese optics company Hoya reports cyberattack, impacts production

Hoya Corporation, a leading global manufacturer of optical products based in Shinjuku-ku, Tokyo, Japan is reporting a significant disruption in its operations due to a cyber incident. Hoya is providing a wide range of products from eyeglasses and contact lenses to medical devices like endoscopes and surgical lenses.

The incident was first identified on March 30 and led to the shutdown of servers at some of Hoya's production facilities and business divisions, affecting the company's manufacturing and ordering systems. The root cause of the shutdown seems to be unauthorized access by a third party.

The company isolated the compromised servers and reported the attack to authorities. As a result, some production lines and ordering systems for certain products have been temporarily taken offline.

The investigation is expected to last several days, leaving the company without a definitive timeline for when normal operations will resume. As of now, the company has not determined the full impact of the incident on its business operations or whether any sensitive information was compromised.

Update - "Hunters International" ransomware gang are demanding a $10 million ransom not to release the allegededly stolen 2 TB of data.  So far no files have been posted on the Hunters International dark web site. Hoya has not shared any updates on the recovery status since April 4, 2024, so it can be assumed that production remains impacted.