FromSoftware parent company Kadokawa reports possible additional data leak from cyberattack

On July 2, Kadokawa Corporation revealed more details about the extensive cyberattack that has been affecting their operations since June 8. As reported by ITmedia, Kadokawa’s latest statement confirms that further stolen data has been leaked. Kadokawa Corporation, whose subsidiaries include Dwango- owner of game developers FromSoftware and Spike Chunsoft, state that they are currently working with security experts to verify the claim. They plan to publish the results of the investigation later this month. 

As we reported in our previous article on this incident, Black Suits claimed to have stolen 1.5 TB of data from Kadokawa Corporation through cyberattacks at the beginning of June, gaining access to and encrypting Kadokawa’s networks (including Dwango and Niconico). According to documents released by Black Suits, they were in negotiation with Kadokawa regarding the stolen data, which includes employees’ personal information, confidential documents and user data. If the ransom was not paid by July 1, Black Suits stated that they would leak all the data.  

According to ITmedia, there have been numerous reports on the internet since the early hours of July 2 claiming that further information has been leaked by the ransomware group (in addition to a portion that was reportedly leaked on June 28). Kadokawa’s July 2 press release states that they have confirmed that Black Suits has claimed responsibility for the latest leak. 

In their press release, Kadokawa Corporation reassured users yet again that their credit card information had not been stored in-house and so was not affected by the cyberattack. They urge people not to access Black Suits’ website nor to download data due to the high risk of malware infection. Kadokawa added that even though they are thoroughly investigating the matter, people should take care not to share leaked data that they might come across on social media.   

Kadokawa Corporation is working with specialist cybersecurity organizations and the police in their investigation. They expect to make a full report later this July.