Blackfield ransomware demands $2M from Nidec Corporation
▼ Summary
– Nidec Corporation, a Japanese manufacturer, suffered a ransomware attack on its Taiwanese subsidiary, Nidec Chaun Choung Technology.
– The Blackfield ransomware gang is demanding a $2 million ransom and threatens to publish or sell stolen data.
– Nidec has taken emergency measures, including shutting down affected servers and networks, and is investigating potential information leaks.
– The company does not expect the incident to impact other Nidec Corporation or Nidec Group companies.
– This is Nidec’s second ransomware attack in recent months, following a previous breach targeting its Vietnam-based division in October 2024.
The Blackfield ransomware group has issued a $2 million ransom demand to Nidec Corporation, a major Japanese manufacturer of electronic components for the automotive and computing sectors. Nidec is renowned for producing a wide array of motors, from micro-precision units used in smartphones and hard drives to large-scale motors for robotics, elevators, and HVAC systems. The company also develops motors for electric vehicles, electric power steering, and advanced driver-assistance systems.
With annual revenues of $17.2 billion, a workforce of 100,000 employees, and operations spanning more than 40 countries through manufacturing sites and subsidiaries, Nidec stands as a global leader in electric motor production.
In a statement released last week, Nidec confirmed that its Taiwanese subsidiary, Nidec Chaun Choung Technology, was hit by a ransomware attack. “On Monday, June 22, 2026, ransomware-originated damage was confirmed in part of Nidec Chaun Choung Technology’s server,” the company reported. “Thereafter, to prevent the spread of the damage, emergency measures, including shutting down the affected server and network, were taken.”
Nidec also acknowledged a “possibility of information leak,” though it has not yet verified any personal or confidential data being exposed online. Regarding operational impact, the company said it is assessing how production, shipping, and other business functions may be affected, but does not expect the disruption to spread to other Nidec Corporation or Nidec Group entities.
The Blackfield ransomware gang has claimed responsibility for the attack, giving Nidec more than 15 days to respond and negotiate, under the threat of publishing or selling the stolen data. To delete the allegedly compromised information, the attackers are demanding $2 million. For an additional $5,000, they offer a one-day extension on the data leak deadline. Blackfield’s extortion post also includes an option to download the data immediately for $400,000.
The threat actor has leaked sample data, including file structures and various documents, to substantiate the breach. However, BleepingComputer could not independently verify the authenticity of this information.
This incident follows a previous data breach in October 2024, when Nidec Corporation disclosed a ransomware attack targeting its Vietnam-based Nidec Precision division, which exposed over 50,000 sensitive files. That attack was claimed by both the 8Base and Everest gangs, each attempting to extort Nidec separately.
(Source: BleepingComputer)
