INC Ransom Claims Attack on Major Automotive Supplier Yazaki Group, Potentially Impacting BMW, Nissan
Published on December 8, 2025
Key Takeaways
- Threat actor: The INC Ransom hacking group has claimed responsibility for a cyberattack against the Japan-based Yazaki Group.
- Exfiltration claim: The attackers allege the exfiltration of 350 GB of sensitive data, including confidential documents and client information.
- Potential impact: The breach could expose proprietary data from major automakers, including BMW and Nissan.
The INC Ransom hacking group has claimed it breached the systems of the Yazaki Group, a major global automotive parts supplier based in Japan. On December 7, 2025, the threat actor alleged it had exfiltrated a significant volume of sensitive data from the manufacturing giant.
Scope of the Alleged Data Breach
According to the threat actor's claims, the alleged Yazaki Group ransomware attack resulted in the theft of approximately 350 GB of data. The reportedly stolen information includes a wide range of sensitive materials:
- confidential corporate documents,
- client data,
- non-disclosure agreements (NDAs),
- financial and operational records,
- human resources files containing employee medical data.
Critically, the exfiltrated data is also said to contain business agreements, technical drawings, and production documentation related to several major automakers, including BMW, Nissan, and Scania.
Potential Fallout from Cyberattack on Automakers' Supplier
The exposure of technical drawings and production details constitutes a significant intellectual property risk.
This event marks another significant manufacturing sector data breach, and while it is currently pending verification, the claims represent a threat to the company and its high-profile automotive clients.
In August, Qilin Ransomware claimed a Nissan Creative Box data breach, and a carmaker's web portal exposed a remote car unlocking vulnerability, giving access to 1,000 dealerships.
Last month, the U.S. CodeRED emergency alert system was crippled by a data breach that INC Ransom claimed.
Related
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular