Hokuyo Restores Systems After Ransomware Disruption; Data-Leak Investigation Continues

Summary

Hokuyo said ransomware disrupted its systems on March 26, 2026, and announced the incident on May 11. Systems were restored and business operations were unaffected, while an external investigation into possible personal-data leakage continues.

Key points

• Hokuyo said ransomware caused a system disruption on March 26, 2026; the company announced the incident on May 11.
• Systems had been restored by the time of the announcement, and Hokuyo said business operations were unaffected.
• An investigation with external experts into possible personal-information leakage is ongoing; a leak has not been confirmed.
• The article notes that recovery does not complete incident response: the entry route, impact scope, attacker dwell time, credential misuse, outbound traffic, backup integrity, and reintrusion prevention may still need review.
• It lists VPNs, remote desktop, email accounts, devices without EDR, vulnerable servers, and misuse of administrator privileges as possible ransomware entry points, not confirmed causes in this incident.