BlackCat ransomware gang claims credit for Seiko data breach

The BlackCat ransomware gang has claimed credit for a cybersecurity attack against Japanese watchmaker Seiko.

BlackCat (also known as ALPHAV) posted on its dark web leak site what it claims are files stolen from Seiko’s servers.

BlackCat announces Seiko data leak

Like other ransomware operations, BlackCat extorts money from targeted organisations by stealing sensitive data, threatening to release it publicly, and encrypting computer systems to lock victims out of their information.

BlackCat affiliates have often gone one stage further and threatened to launch distributed denial-of-service (DDoS) attacks if extortion demands are not met.

Blackcat ransom note

Seiko announced earlier this month that it had suffered a data breach which saw hackers access “at least one of its servers” and warned that information may have been stolen.

The company says that it has brought in external experts to investigate the incident.

Earlier this year, cybersecurity reporter Brian Krebs published an interesting account of his contact with online criminals who may be associated with the Russian-speaking BlackCat group.

Found this article interesting? Follow Graham Cluley on Twitter or Mastodon to read more of the exclusive content we post.


Graham Cluley is a veteran of the cybersecurity industry, having worked for a number of security companies since the early 1990s when he wrote the first ever version of Dr Solomon’s Anti-Virus Toolkit for Windows. Now an independent analyst, he regularly makes media appearances and is an international public speaker on the topic of cybersecurity, hackers, and online privacy.
Follow him on Twitter, Mastodon, Bluesky, or drop him an email.