Advantest Discloses Data Breach Following February Ransomware Attack
Japanese chip testing giant Advantest has confirmed a data breach, revealing that personal information was stolen during a ransomware attack initially disclosed in February 2026.
Japanese chip testing giant Advantest has confirmed that personal information was stolen during a ransomware attack that initially came to light in February 2026. The company, a key supplier of automatic test equipment for major chipmakers like Intel and Samsung, is now notifying affected individuals about the breach.
In February, Advantest disclosed that its network had been compromised by hackers who deployed ransomware. At that time, the company was still investigating whether any sensitive data had been exfiltrated from its systems. The subsequent data breach notifications reveal that personally identifiable information (PII) was indeed accessed and stolen by the attackers.
The compromised data includes a wide range of sensitive personal details, such as names, dates of birth, contact information, Social Security numbers, passport and driver's license numbers, as well as medical and financial information. Advantest has stated that it has no information to suggest that the stolen PII has been publicly disclosed or misused, but warned that the incident may have increased the risk of identity theft or fraud for those affected.
While Advantest has not publicly disclosed the total number of individuals impacted by the data breach, regulatory filings provide some indication of the scale. Notifications submitted to the California Attorney General's Office indicate that more than 500 California residents are affected. Additional filings with the Massachusetts and Vermont Attorneys General list 14 and 8 affected residents, respectively.
No specific ransomware group has publicly claimed responsibility for the attack on Advantest. This lack of attribution is not uncommon, as some threat actors choose to remain anonymous or operate through various affiliates. The investigation into the exact methods used and the identity of the perpetrators is likely ongoing.
The disclosure of a data breach months after the initial ransomware incident highlights potential challenges in detecting data exfiltration during such attacks. Organizations often focus on containing the ransomware and restoring operations, which can sometimes delay the discovery of secondary data theft. This case underscores the importance of comprehensive forensic investigations that go beyond immediate recovery efforts.
Advantest's situation is part of a broader trend of sophisticated cyberattacks targeting the semiconductor supply chain. Companies in this sector are attractive targets due to the critical nature of their products and the potentially high value of intellectual property and sensitive customer data they hold. The incident serves as a stark reminder for all organizations, particularly those in critical infrastructure, to maintain robust security postures and incident response capabilities.
As Advantest works to address the fallout from this breach, affected individuals are advised to remain vigilant against potential identity theft and fraud. The company's notification serves as a call to action for enhanced monitoring of financial accounts and personal information, a standard precaution following any significant PII exposure.