INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Advantest confirms personal information stolen in ransomware attack

| 2026-10-07 10:27 HIGH LOW RANSOMWARE & EXTORTION DATA BREACH
JSON
Executive Summary
AI-generated
On February 15, a threat actor breached the network of Advantest Corporation, a Japanese manufacturer of automated test equipment for the semiconductor industry. The attackers deployed a ransomware payload and accessed parts of the company's systems, but it is unclear whether customer or employee data was impacted. In October 2026, Advantest confirmed that personally identifiable information (PII) belonging to affected individuals had been stolen in the attack. The compromised data includes contact information, date of birth, Social Security Number, national ID number, driver’s license, passport number, medical information, and financial information. To mitigate this risk, Advantest is providing instructions on how to enroll in free identity theft monitoring services until January 4, 2027.
Technical Mitigations AI-generated
• Network Intrusion Prevention (ATT&CK mitigation for Phishing): Network intrusion prevention systems and systems designed to scan and remove malicious email attachments or links can be used to block activity. • Restrict Web-Based Content (ATT&CK mitigation for Phishing): Determine if certain websites or attachment types (ex: .scr, .exe, .pif, .cpl, etc.) that can be used for phishing are necessary for business operations and consider bloc • Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
JP
manufacturingmanufacturing
Incident Timeline
‎February 2026
Threat actors used ransomware to target Advantest systems, extracting personally identifiable information from the servers.
organisation Advantest
“In February 2026, Advantest became aware of a cybersecurity incident in which an unauthorized third party accessed Advantest systems and extracted some data from our servers,” reads the notification .
organisation PII
“The data extracted from our servers included PII (personally identifiable information) belonging to you.”
organisation Social Security Number
The data types that have been exposed include the following: Contact information Date of birth Social Security Number (SSN) National ID number Driver’s License Passport number Medical information Financial information Other ID numbers It is unclear whether the compromised data belongs to customers, employees, partners, or a combination of these groups.
organisation SSN
The data types that have been exposed include the following: Contact information Date of birth Social Security Number (SSN) National ID number Driver’s License Passport number Medical information Financial information Other ID numbers It is unclear whether the compromised data belongs to customers, employees, partners, or a combination of these groups.
organisation National ID
The data types that have been exposed include the following: Contact information Date of birth Social Security Number (SSN) National ID number Driver’s License Passport number Medical information Financial information Other ID numbers It is unclear whether the compromised data belongs to customers, employees, partners, or a combination of these groups.
organisation Driver’s License Passport
The data types that have been exposed include the following: Contact information Date of birth Social Security Number (SSN) National ID number Driver’s License Passport number Medical information Financial information Other ID numbers It is unclear whether the compromised data belongs to customers, employees, partners, or a combination of these groups.
organisation BleepingComputer
BleepingComputer has contacted Advantest with questions about the number of affected individuals, but we have not received a response as of publication.
‎February 15
Threat actors breached Advantest's network on February 15, gaining access to some of its systems.
‎October 6, 2026
Advantest confirmed that personal information was stolen in a ransomware attack.
industry Manufacturing
General Document Context
tactic Data Breach
In a data breach notification dated October 6, 2026, Advantest confirms that data was stolen in the attack.
‎January 4, 2027
Threat actors did not explicitly target Advantest, but the company confirmed that personal information was stolen in a ransomware attack.
industry Manufacturing
General Document Context
organisation NFL
Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.
organisation CHANEL
Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.
Intelligence Sources
BleepingComputer 2026-10-07