T. Hasegawa USA targeted by Hunters ransomware group

• Ransomware group: Hunters
• Country: United States
• Sector: Manufacturing
• Announcement date: January 11, 2025

Hunters ransomware group claims data breach at T. Hasegawa USA

The threat actor known as Hunters International has listed T. Hasegawa USA on its leak site, alleging a significant data breach. According to the announcement made on January 11, 2025, the group claims to have successfully exfiltrated a massive amount of information from the organization's systems. This development follows a pattern seen in modern cyberattacks where threat actors use public leak sites to pressure victims by threatening to release stolen data.

Details of the alleged attack

The announcement made by Hunters International alleges that the organization's systems were compromised, resulting in the theft of a vast quantity of files. The group claims that the exfiltrated data consists of 1.6 TB in total volume. This volume is composed of approximately 1,138,251 individual files. While the group has made these claims, it is important to note that the announcement is a claim made by the threat actor.

Interestingly, the group has also reported a change in their operational methodology, stating that they have announced the cessation of their encryption activities as of 2025. This shift suggests a potential change in how the group conducts its operations, though the impact of this change on their data exfiltration tactics remains to be seen.

Data involved in the claim

Regarding the specific nature of the stolen information, the listing provides no specific details regarding the nature of the alleged leaked data. The only information provided relates to the scale of the theft, specifically the total size and the number of files involved.

• Total data size: 1.6 TB
• Total file count: 1,138,251 files

About T. Hasegawa USA

T. Hasegawa USA is a company that develops and manufactures flavor and fragrance ingredients for the food and beverage industry. It operates as the United States subsidiary of the Japan-based T. Hasegawa Co., Ltd.

Potential risks and organizational impact

This claim against T. Hasegawa USA may pose risks to the organization's operational continuity and data privacy. If the large volume of allegedly exfiltrated data contains employee or customer information, it could lead to legal proceedings under US state laws and relevant data protection regulations. The publication of this data may create secondary risks for the organization's supply chain partners and provide a basis for targeted phishing attacks.

Given the past activities of the Hunters International group, it is assessed that such leaks could damage the organization's reputation and lead to the disclosure of trade secrets. In the manufacturing sector, the loss of proprietary formulas or ingredient specifications can be particularly damaging to competitive standing.

In general, ransomware attacks often employ a "double extortion" tactic. In this scenario, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage. By threatening to leak the data on a public site, the attackers aim to increase the pressure on the victim to pay a ransom. To defend against such threats, organizations typically implement robust security measures, such as multi-factor authentication, regular offline backups, and continuous monitoring of network traffic to detect unauthorized data exfiltration.