Kubota reveals month-long hacker access to employee data

Overview of the Breach

Kubota North America Corporation disclosed that hackers gained access to its network systems for over a month in 2023. The compromised access occurred between March 16 and April 20, with a threat actor breaching the system and accessing sensitive employee information.

Data Exposed

The exposed data includes full names, Social Security numbers, dates of birth, taxpayer IDs, driver’s license numbers, and direct deposit bank account information. Additionally, benefits enrollment and claims data for dependents were compromised as well.

Notifications regarding the specific impacts were sent to affected individuals starting June 30, 2023.

Response and Mitigation

In response to the breach, Kubota advised employees to monitor their bank accounts and healthcare statements for suspicious activities. The company has implemented additional security measures to guard against future incidents.

Furthermore, applicants were offered identity protection services through Kroll to help mitigate risks associated with the exposure of their sensitive information.

Current Status

As of now, no data extortion groups or ransomware gangs have claimed responsibility for the attack. Kubota has reported no operational disruptions related to the breach. Inquiries regarding the perpetrators and the method of attack remain unanswered.