In September 2023, Yusen Logistics, a Tokyo-based subsidiary of the NYK Group, fell victim to a ransomware attack orchestrated by the BlackCat/ALPHV gang. The cybercriminals, leveraging their advanced ransomware-as-a-service (RaaS) platform, claimed to have exfiltrated 90GB of sensitive company data, including potentially proprietary operational and corporate information. The attack not only risked the exposure of critical internal documents but also caused operational disruptions, threatening the company’s logistical workflows and client trust. BlackCat/ALPHV, active since late 2021, is infamous for its sophisticated encryption methods, ability to bypass security tools, and high ransom demands, often tailored to the victim’s financial capacity. While the full scope of the stolen data remains undisclosed, the breach poses severe risks, including financial fraud, reputational damage, and regulatory penalties, particularly if customer or partner data was compromised. The incident underscores the growing threat of targeted ransomware campaigns against global supply chain and logistics firms, where operational continuity and data integrity are paramount.

The California Attorney General reported that Yusen Logistics (Americas) Inc. experienced a data breach on September 24, 2013, involving the theft of a password-protected, unencrypted laptop. The laptop contained payroll deduction information, including names, addresses, Social Security numbers, and payroll benefit deduction amounts for current and former employees. The breach notification was reported on October 25, 2013.