Notice regarding results of security incident investigation

1) Behavior and Scope of Malware
The investigation confirmed that the malware was initially stored on one of Fujitsu's business PCs and then spread to other business PCs. This malware was particularly difficult to detect as it used sophisticated techniques to evade detection, unlike ransomware.

Following a comprehensive investigation, it was confirmed that the number of infected business PCs and the number of other devices where the copy instruction command was executed, and information was transferred, was no other than the 49 PCs initially detected. These devices were all used within Fujitsu’s internal network in Japan, and the investigation has not detected any impact on business PCs connected to network environments outside of Japan.

The affected computers were not managed through the cloud services provided by Fujitsu. Additionally, no trace of access to the services provided by Fujitsu to customers was found. The investigation concluded that the damage did not spread outside of the company’s business computers, including to customer’s network environments.

2) Extent of information leakage
The investigation into various logs (communication logs and operation logs) held by Fujitsu confirmed that some files could have been fraudulently taken out due to the malware’s behavior, and commands for replication instructions were executed. These files contained personal or business-related information about certain customers, who have been informed separately and necessary actions taken. At present, Fujitsu has not received any reports of misuse of personal or information related to customer’s business.

1) Isolating and removing all business computers suspected of being compromised from the internal network environment after detecting suspicious activity.

2) Preventing attackers from connecting to the external server that was the source of the intrusion.

3) Studying patterns in the characteristics of this malware attack method, implementing security monitoring rules to all business PCs and enhancing virus detection software functions and updates.