Ransomware · Threat Intelligence · Privacy
Advantest says hackers stole personal data in February ransomware attack
Japanese chip testing company Advantest has confirmed that hackers stole personal information during a ransomware attack earlier this year. The company is now notifying affected individuals.
Ross GrantUpdated 3 min read
The short version
Advantest, a large Japanese technology company, has confirmed that hackers stole personal data during a ransomware attack earlier this year. The stolen information includes names, contact details, and government ID numbers. The company is now warning people who may be at risk. It is not yet clear how many people are affected or if the data has been misused.
By the numbers
- 500+California residents affected (minimum)SecurityWeek
- 14Massachusetts residents affectedSecurityWeek
- 8Vermont residents affectedSecurityWeek
What happened?
Advantest, a Japanese chip testing company, confirmed that hackers stole personal information during a ransomware attack in February 2026. The company is now notifying affected individuals. The stolen data includes names, dates of birth, contact details, Social Security numbers, passport and driver’s licence numbers, and some medical and financial information. The total number of people affected is not yet clear.
What Advantest revealed about the breach
Advantest, a major supplier of chip testing equipment to companies like Intel and Samsung, has confirmed that hackers stole personal information from its servers during a ransomware attack in February 2026. The company only recently began notifying affected individuals, after months of investigating the incident. According to SecurityWeek (opens in a new tab), Advantest's notifications state that the attackers accessed a range of sensitive data, including names, dates of birth, contact details, Social Security numbers, passport and driver’s licence numbers, as well as some medical and financial information.
Who is affected and how many people?
Advantest has not said exactly how many people are affected. However, filings with US state authorities give some clues. The company reported the breach to the California Attorney General’s Office, indicating that more than 500 California residents are impacted. Notifications to attorneys general in Massachusetts and Vermont list 14 and 8 affected residents, respectively. The total number of people affected worldwide is not yet clear.
What information was taken?
The stolen data includes personally identifiable information (PII). This can be used to identify or contact a person, and includes names, dates of birth, contact details, Social Security numbers, passport and driver’s licence numbers, and some medical and financial information. Advantest has told those affected that there is no evidence their information has been made public or misused so far. However, the company warns that the breach may increase the risk of identity theft or fraud.
How did the attack happen?
In February 2026, Advantest disclosed that it had suffered a ransomware attack. Ransomware is a type of malicious software that encrypts files and demands payment for their release. At the time, the company was still investigating whether any data had been stolen. It has now confirmed that attackers did exfiltrate personal information. No ransomware group has publicly claimed responsibility for the attack, and Advantest has not shared technical details about how the hackers gained access or what vulnerabilities may have been exploited.
What should affected individuals do?
Advantest's notification advises those affected to be alert for signs of identity theft or fraud. This includes monitoring financial accounts, credit reports, and being wary of suspicious emails or phone calls. In the United States, people whose Social Security numbers were exposed may be eligible for free credit monitoring or identity theft protection services. Anyone who receives a notification from Advantest should follow the company's instructions and consider placing a fraud alert or credit freeze with major credit bureaus.
What happens next?
Advantest is likely to continue working with authorities and regulators as the investigation continues. Under US law, companies that suffer data breaches affecting residents must notify them and may face regulatory scrutiny. In the UK and EU, privacy regulators can impose fines of up to £17.5 million or 4% of global turnover (UK GDPR), or €20 million or 4% (EU GDPR) for serious breaches. The full impact on Advantest's business and reputation is not yet known.
Claimed vs confirmed
- Confirmed
Hackers stole personal information from Advantest during the February 2026 ransomware attack.
Advantest confirmed this in notifications to affected individuals, according to SecurityWeek.
- Confirmed
No ransomware group has claimed responsibility for the attack.
SecurityWeek reports that no known group has taken credit.
The impact
- Money
- Advantest could face regulatory scrutiny and possible fines under US, UK, or EU privacy laws. The exact financial impact is not yet known.
- Reputation
- The breach may affect trust in Advantest, especially as it supplies major chipmakers. The delay in confirming the data theft may also raise questions.
- Customers
- People whose data was stolen are at risk of identity theft or fraud. They should monitor accounts and follow any instructions from Advantest.
Why it matters
Anyone whose personal information was stolen could be at risk of identity theft or fraud. The breach also highlights the risks companies face from ransomware attacks, and the importance of protecting sensitive data.
How does it work?
Ransomware is malicious software that encrypts files on a victim's system and demands payment for their release. In some cases, attackers also steal data before encrypting it, using the threat of leaking sensitive information as extra leverage.
Key points
- Advantest confirmed a data breach following a February 2026 ransomware attack.
- Personal information, including government ID numbers and financial data, was stolen.
- More than 500 California residents are known to be affected; the total number is unclear.
- No evidence yet that the stolen data has been misused or published.
- Ransomware attacks can lead to both data loss and privacy risks.
Sources
SecurityWeek
Reference
