Cyberattack on NEC Contractor Exploits Legitimate Accounts to Encrypt Customer Servers, Personal Data Also Leaked

What happened

NEC announced on October 20, 2026 that a contractor doing system development and maintenance work for NEC was attacked in late September. The attackers used a stolen real account from the contractor's computer to get into customers' systems. They locked files on servers with encryption, so many systems stopped working. Some information was also leaked, including personal data. NEC has already contacted several affected customers one by one.

Key facts

• The attack hit a contractor in late September 2026, and NEC announced it on October 20, 2026.
• Attackers used stolen login details for a valid account.
• Files on customer servers were encrypted, so various systems could not be used.
• Cloud storage files used to share information among customers, NEC, and contractors were also leaked.
• NEC has not yet said how many records were leaked, or the names of the contractor or affected customers.

Some simple terms

Encryption means scrambling files so no one can read or use them without a key. A valid account is a normal user login, so attackers who steal one can look like a real worker. Cloud storage is online space where files are saved and shared over the internet.

Why it matters

This case shows that a weak link in a supplier can put a large company's customers at risk. Personal data was leaked, so people may need to watch for misuse. NEC says it is tightening how it manages contractors and personal data to stop this from happening again.

What to watch

• Which contractor and which customers were affected.
• How many people's personal data were leaked, and what kind of data it was.
• Whether NEC reports the full cause and details of the attack.
• How NEC changes its rules for managing contractors and personal data.