On Monday 8th of June 2021, Honda had started a investigation into a possible incident of unauthorised attempt to access its systems. Soon after the investigation had started, Honda suspended the production of its product at sites around the world and Honda’s staff were told not to access their IT equipment while the investigation occurred.
Honda had confirmed they had halted production at its factories across the world had been halted. A spokesperson also confirmed that “Honda can confirm that a cyber-attack has taken place on the Honda network,” and “We can also confirm that there is no information breach at this point in time.
Even though Honda has not revealed that much information about the incident, there was evidence that it was a ransomware attack using the SNAKE (EKANS) ransomware as a sample of the ransomware was submitted to VirusTotal that had a reference to an IP linked to the Honda domain, which is used to check for the internal Honda network name of “mds.honda.com.”
© 2021 CyberEnsō – Nihon Cyber Defence Co., Ltd. All Rights Reserved.