Japanese steel manufacturer Yodogawa reports ransomware attack on Taiwanese subsidiary
Learn More
Yodogawa Steel Works Ltd. has disclosed that its Taiwanese subsidiary Sheng Yu Steel Co., Ltd. was hit by a ransomware attack that potentially compromised personal and confidential information. Yodogawa Steel Works operates multiple international subsidiaries across Asia, including significant operations in Taiwan, China, and Thailand.
The incident was initially discovered on April 8, 2025. The ransomware attack targeted Sheng Yu Steel's IT infrastructure, and cybercriminals potentially gained access to sensitive corporate data and employee information.
The company has not disclosed the attacking group but breach monitoring services are attributing the attack to the "Underground," ransomware gang.
Exposed data includes
- Personal employee information and confidential data
- Corporate operational and business information
- Internal company communications and documentation
- Potentially sensitive customer and supplier information
The number of affected individuals is not disclosed.
Yodogawa Steel Works engaged external cybersecurity experts to conduct a forensic investigation and implement enhanced security measures across its network infrastructure. Local Taiwanese authorities have launched a formal investigation into the cybersecurity incident, and are working closely with Yodogawa Steel Works and Sheng Yu Steel to understand the attack and assess the full scope of the data compromise.
Yodogawa Steel Works claims that the incident is expected to have negligible impact on the company's overall business performance and financial operations.
