Nidec Confirms Ransomware Damage as Blackfield Demands $2 Million
Summary
Nidec confirmed ransomware damage to part of a server at its Taiwanese subsidiary and shut down affected systems. Blackfield claims the attack and demands $2 million; possible data exposure remains under investigation.
Key points
- Nidec confirmed ransomware-originated damage to part of a server at Taiwanese subsidiary Nidec Chaun Choung Technology.
- The company shut down the affected server and network to limit the damage and is assessing possible operational impacts.
- Nidec said information may have been exposed, but no personal or confidential information had been confirmed leaked online.
- Blackfield claims responsibility and demands $2 million to delete allegedly stolen data, threatening to publish or sell it.
- Blackfield also offered a one-day deadline extension for $5,000 and posted a link offering the data for $400,000.
- BleepingComputer could not verify the validity of data samples the group posted.
Article Details
- Victim Organization
- Nidec Chaun Choung Technology, a Taiwanese subsidiary of Nidec Corporation
- Incident Type
- Ransomware attack with an extortion demand and a possible data leak
- Incident Date
- 2026-06-22
- Data Types Exposed
- Documents and file-structure information were shown in leaked samples, but BleepingComputer could not verify their validity or confirm that data was exposed online.
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- Nidec confirmed ransomware damage to part of a server and shut down the affected server and network to prevent further spread. The impact on production, shipping, and other operations was under investigation; Nidec did not expect the impact to extend to other Nidec Corporation or Nidec Group companies.
- Ransom Or Extortion
- Blackfield claimed the attack and demanded $2 million to delete allegedly stolen data, threatening to publish or sell it if Nidec did not respond and negotiate within more than 15 days. The actor also offered a one-day deadline extension for $5,000 and posted a link offering immediate data download for $400,000. The alleged theft and leaked samples were not independently verified.
- Claim Status
- confirmed
Threat Actors
8baseWas among the ransomware groups that claimed a separate 2024 attack on Nidec's Vietnam-based Nidec Precision division and attempted to extort the company.BlackfieldClaimed responsibility for the ransomware attack on Nidec Chaun Choung Technology and demanded payment for allegedly stolen data; the claimed theft and leaked samples were not independently verified.EverestWas among the ransomware groups that claimed a separate 2024 attack on Nidec's Vietnam-based Nidec Precision division and attempted to extort the company.