Noritsu America Corp. targeted by Hunters ransomware group

• Ransomware group: Hunters
• Country: United States
• Sector: Manufacturing
• Announcement date: May 7, 2024

Hunters ransomware group claims attack on Noritsu America Corp.

The Hunters International ransomware group has listed Noritsu America Corp. on its dedicated leak site. According to the group's announcement, which was published on May 7, 2024, the organization has been targeted in a cyberattack involving both data exfiltration and system encryption. This claim follows a pattern often seen in modern ransomware operations, where threat actors attempt to pressure victims by threatening to release sensitive information.

The group alleges that the attack occurred on May 7, 2024, the same day the announcement was made public. While the group claims to have successfully compromised the victim's infrastructure, there is no specific detail regarding the exact content of the allegedly exfiltrated data. The announcement serves as a notification of a potential security breach, though the organization's internal response or confirmation of the event has not been provided in the source material.

Details of the alleged data exfiltration

The information provided by the threat actor regarding the stolen data is limited to volume and file count rather than specific content. Based on the screenshots provided by the group, the dataset is significant in scale. The listing indicates that the stolen information consists of 233.7 GB of data, which is comprised of 275,481 individual files.

Despite the large volume of files mentioned, the group has not specified the types of files or the nature of the information contained within them. In many ransomware scenarios, the lack of immediate detail regarding file types is common, as groups often wait to reveal the specific contents to increase leverage during negotiations. The sheer scale of the data, involving over a quarter of a million files, suggests a substantial impact on the organization's digital environment.

About Noritsu America Corp.

Noritsu America Corp. is a leading provider of photo printing systems, digital imaging equipment, and related software solutions. The company offers high-quality image processing technologies for the professional photography and retail printing industries. Operating within the manufacturing sector, the company provides essential technological infrastructure for various imaging-related businesses.

Risk assessment and organizational implications

This claim may pose risks to the organization's operational continuity and data privacy. As a US-based entity, a potential data breach could lead to legal consequences under state-level privacy laws and sectoral regulations. If the leaked data includes employee or customer information, secondary risks such as identity theft and targeted phishing attacks may be observed.

The Hunters International group is a collective that emerged in 2023 and is assessed to be linked to the Hive ransomware. It is worth noting that there are reports suggesting the group ceased encryption activities in 2025. This specific group's tactics involve a double extortion model, where data is not only encrypted to disrupt operations but also stolen to facilitate extortion through the threat of public disclosure.

For organizations operating in the manufacturing and imaging sectors, such incidents highlight the necessity of robust cybersecurity frameworks. Common defensive steps for organizations include maintaining offline backups, implementing strict access controls, and conducting regular security audits to mitigate the risk of unauthorized access. Protecting the integrity of digital imaging and printing software solutions is critical for maintaining trust in professional and retail markets.