Mizuno USA says hackers were able to breach networks, steal data for months

Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol
(Image credit: Shutterstock)

  • Mizuno USA files new report with the Maine Attorney General
  • In the report, it detailed a cyberattack that happened late 2024
  • Cybercriminals were exfiltrating sensitive data for months

Mizuno USA has confirmed suffering a cyberattack in which it lost sensitive customer data.

The American sports gear manufacturer filed a new report with the Maine Office of the Attorney General in which it shared a data breach notification letter sent to affected customers.

In the notification, Mizuno USA said that it detected suspicious activity on its network on November 6, 2024, which prompted it to launch an in-depth investigation. "The investigation determined that certain systems within the network were accessed by an unknown individual and files were copied without authorization periodically between August 21, 2024 and October 29, 2024," the breach notification says.

Get Incogni at 55% off with code TECHRADAR

Get Incogni at 55% off with code TECHRADAR
Remove your personal information from the internet with ease. Incogni protects your online
identity and reduces unwanted robocalls and spam emails.

BianLian

While not saying exactly how many people were affected by the attack, Mizuno shared the type of information stolen: people’s names, Social Security numbers, financial account information, driver's license information, and passport numbers.

In response, Mizuno USA will be offering a year’s worth of free credit monitoring and identity protection theft services to impacted individuals, and urged them to keep a close eye on their financial accounts for signs of fraud.

The company did not say who the miscreants were, but BleepingComputer determined the BianLian threat actor assumed responsibility for the attack in November 2024.

“The BianLian ransomware group claims to have breached the USA branch of Mizuno,” an X post by HackManac said at the time. “Allegedly, exfiltrated data include financial data, HR records, contracts and confidential agreements, partner and vendor information, client and customer data, drawings, trade secrets and patents, as well as mailboxes and internal and external email correspondence.”

Mizuno USA is the American subsidiary of Mizuno Corporation, a Japanese sports equipment and apparel company. It specializes in high-performance gear for sports like baseball, golf, running, volleyball, and softball. Last year, Mizuno Corporation reported global revenues of approximately $1.5 billion, with Mizuno USA contributing roughly $224 million.

Via BleepingComputer

You might also like

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.

Read more
Ransomware
Top cannabis brand Stiiizy says hackers got access to its systems
ransomware avast
The biggest addiction treatment provider in the US says it was hit by data breach
An abstract image of padlocks overlaying a digital background.
Thousands of Bitcoin ATM users may have personal data leaked after breach
Code Skull
Casio confirms data of 8,500 people exposed in recent ransomware attack
A person's fingers type at a keyboard, with a digital security screen with a lock on it overlaid.
Blood donation firm reveals donor personal data stolen in cyberattack
Red padlock open on electric circuits network dark red background
Newspaper printing across US hit after Lee Enterprises says “cybersecurity event” disrupted operations
Latest in Security
A graphic showing fleet tracking locations over a city.
Lost & Found tracking site hit by major data breach - over 800,000 could be affected
US President Donald Trump speaks to the press as he signs an executive order to create a US sovereign wealth fund, in the Oval Office of the White House on February 3, 2025, in Washington, DC.
US set to pause cyber-offensive operations against Russia - but CISA says it won't stop
Web DDoS attacks see major surge as AI allows more powerful attacks
Polish space agency says it was hit by a cyberattack
Illustration of a hooked email hovering over a mobile phone
AWS misconfigurations reportedly used to launch phishing attacks
A concept image of someone typing on a computer. A red flashing danger sign is above the keyboard and nymbers and symbols also in glowing red surround it.
Microsoft Teams and other Windows tools hijacked to hack corporate networks
Latest in News
YouTube TV
YouTube TV might be planning a big Netflix update that puts the best streaming services first
Google Pixel 9 Pro
Here are the 7 best Pixel 9 and Pixel Watch 3 features landing in March’s Pixel Feature Drop
Bang & Olufsen Beogram 4000C Saint Laurent Rive Droite Edition
Bang & Olufsen's latest reworked turntable is a masterpiece of retro revival, in a breathtaking wooden presentation box
Apple Watch Series 10
Apple unveils new Apple Watch bands – here's what's in the Spring 2025 collection
iPad Air M3
Apple makes one hardware change to the iPad Air that might be the best indicator of its true lightweight tablet intentions
Shure MoveMic 88+ lifestyle image
Shure's tiny MoveMic 88+ gives creators a cheap and easy way to record crystal clear audio on a smartphone