Japan-based organization JVCKenwood suffered a ransomware attack conducted by the Conti ransomware group. Conti accessed and stole almost 2TB of information belonging to JVCKenwood and exfiltrated data including customers, suppliers and employees’ personal information. The ransomware attackers demanded a ransom of $7M not to publish the stolen information and provide a decryptor.

JVCKenwood, a Japanese electronics multinational with nearly 17,000 employees and $2.5 billion in sales (2021), fell victim to a Conti ransomware attack. The Conti gang claims to have exfiltrated 1.7 TB of data and is demanding a $7 million ransom. The attack aligns with a broader surge in Conti ransomware incidents, with over 400 cases reported globally, including high-profile targets like GSS and Vera Wang. The breach poses severe risks to JVCKenwood’s operations, intellectual property, and financial stability, given the scale of data theft. Conti’s tactics typically involve double extortion—encrypting systems while threatening to leak stolen data if ransom demands are unmet. The incident underscores the growing threat of ransomware against large enterprises, with potential cascading effects on supply chains, customer trust, and regulatory compliance. CISA has issued advisories highlighting Conti’s sophistication, including lateral movement within networks and persistence mechanisms to evade detection.