Nippon Steel Solutions reports data breach after zero-day attack on network infrastructure
Learn More
Nippon Steel Solutions Corporation, a subsidiary of Japan's steel manufacturer Nippon Steel, is reporting a data breach that exposed data of customers, business partners, and employees.
The incident was detected on March 7, 2025. Nippon Steel Solutions isolated the compromised systems from their network, restricted external access and engaged external cybersecurity specialists to conduct an investigation.
An investigation showed that hackers had exploited a zero-day flaw in unspecified network equipment and that the attackers accessed and potentially stole sensitive internal data.
The compromised information includes:
- Customer information:
- Names,
- company names,
- organizational affiliations,
- job titles,
- company addresses,
- business email addresses,
- phone numbers
- Partner information:
- Names and business email addresses using company domain provided by Nippon Steel Solutions
- Employee information:
- Names,
- department details,
- job positions,
- business email addresses
The number of affected individuals has not been disclosed.
Nippon Steel Solutions reported the incident with law enforcement and to the Japan's Personal Information Protection Commission. The company is actively notifying all affected customers, partners, and employees about the breach and providing guidance on protective measures they should take.