Confirmed

NEC: subcontractor cyber-attack caused customer system outages and leak of files including personal data

NEC announced on October 20 that a development/maintenance subcontractor was attacked in late September, stolen credentials were abused, customer environments were accessed and files in a shared cloud storage—including personal data—leaked.

Last updated: 2026-11-09

Overview

Personal-data details and counts will be reported to customers when known (count blank). Encrypted files also stopped customer systems. NEC says it is tightening subcontractor controls.

Timeline

UnknownOccurred
UnknownDiscovered
2026-10-20Disclosed

Organization response

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

What you can do

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

Sources

委託先への不正アクセスに起因するお客さまのシステム障害、情報漏えいに関するお詫び日本電気株式会社 · 2026-11-09

NEC: subcontractor cyber-attack caused customer system outages and leak of files including personal data

Overview

Timeline

Organization response

What you can do

Sources

Related information

No published information yet

Comments and replies

Write a comment