BlackSuit Ransomware Group Claims the KADOKAWA Cyberattack

Written by Lore Apostol
Published on June 28, 2024

Japanese publisher KADOKAWA says the June 8 cyberattack, including ransomware, crippled multiple websites of the KADOKAWA Group, targeting popular video-sharing platform Niconico and related services, affecting manufacturing, distribution, and Web services and merchandise businesses. On June 27, the BlackSuit ransomware gang claimed this attack.

The treat actor expects a ransom to be paid by July 1 to refrain from leaking the alleged data trove they own. They say they obtained it by breaching the company’s systems a month ago, even mentioning that the “KADOKAWA network architecture was not organized properly.

The hacker group published a sample of the stolen information on their leak site, boasting about 1.5TB of data, including financial data, contracts, business plans, private legal documents, and user and employee details from Dwango, Niconico, KADOKAWA, and other subsidiaries.

Kadokawa Cyber Attack Breached Data
Image Source: Bleeping Computer

As KADOKAWA Corporation continues its investigation, KADOKAWA Group’s data center remains largely affected, with many servers still down. The company is issuing an apology to its readers, users, writers, creators, business partners, shareholders, investors, and stakeholders.

The BlackSuit ransomware gang is also suspected to be behind a recent data breach impacting retail technology and software provider CDK Global. The huge security incident caused significant disruption to nearly 15,000 car dealerships in the U.S., and the cybercriminals demanded tens of millions of dollars in ransom.

BlackSuit is a suspected rebrand of the Royal ransomware operation, which is believed to be the successor of the Conti cybercrime group of Russian and Eastern European threat actors. Earlier this month, BlackSuit allegedly published hundreds of sensitive police files stolen from the Kansas Police Department after the KCKPD refused to pay ransom.

For a better user experience we recommend using a more modern browser. We support the latest version of the following browsers: For a better user experience we recommend using the latest version of the following browsers: