NYK Reports Unauthorized Access to Marine Fuel Procurement System
Summary
NYK says a third party accessed its marine fuel procurement system on March 24, 2026. Employee and business-partner personal information may have been taken; the system was restored March 27, and no encryption or financial demands were found.
Key points
- NYK detected unauthorized access to a marine fuel procurement system on March 24, 2026, isolated it from the network and suspended its use.
- NYK says certain data, including personal information, was accessed and exfiltrated, while also stating that data may have been taken.
- Potentially affected information includes names, company names, telephone numbers and email addresses of NYK Group and business-partner employees, including former NYK employees.
- The system was restored on March 27, 2026.
- NYK reported the incident to Japan’s Personal Information Protection Commission and relevant authorities, and to Japanese police on March 31.
- NYK reported no evidence of data encryption or financial demands, and no confirmed secondary damage.
Article Details
- Victim Organization
- NYK Group
- Victim Domain
- nyk.com
- Incident Type
- Unauthorized access to a marine fuel procurement system, with certain data including personal information potentially exfiltrated.
- Incident Date
- 2026-03-24
- Disclosure Date
- 2026-04-09
- Data Types Exposed
- Names
- Company names
- Telephone numbers
- Email addresses
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- The system was isolated from the network and its use was suspended after the access was detected. It was restored on 2026-03-27.
- Ransom Or Extortion
- No evidence of data encryption or financial demands was reported.
- Claim Status
- confirmed