Rapid7 Threat Report: Japanese Companies Exposed to Increased Ransomware Risk Through Global Business Footprint

Overseas operations may present a serious cyber risk of ransomware and state-sponsored threats

Boston, MA — June 28, 2023

Rapid7, Inc. (NASDAQ: RPD), a leader in cloud risk and threat detection, today announced the publication of a new cyber threat landscape report focused on Japan and its global business footprint. 

The Rapid7 Japan Cyber Threat Landscape Report highlights Japanese businesses’ unique threat profile, which has led to an increase in instances of sensitive data loss and business disruption via ransomware. Rapid7 researchers observed for example that, as of late 2022 and early 2023, LockBit 3.0 ransomware operators were specifically targeting Japanese organizations — particularly Japanese manufacturers. The prevalence of manufacturing within Japan makes it a leading target for ransomware groups and nation states, whereas healthcare is the most common target in other parts of the world.   

“Manufacturing organizations have a low tolerance for downtime or any other type of operational disruption, and ransomware operators know that makes them vulnerable to extortion,” said Paul Prudhomme, Rapid7 principal security analyst and Japan Cyber Threat Landscape Report author. “When a Japanese manufacturer’s operations are disrupted, it can have supply chain implications worldwide, as many other manufacturers depend on supplies of Japanese components.”

As the world’s third largest economy after the U.S. and China, Japan is home to global corporations with complex networks of overseas operations that include subsidiaries, third-party suppliers, and other affiliates. This is of particular interest, as the Rapid7 report also notes that many of the most recent compromises of Japanese companies began with unauthorized access to a subsidiary, at which point the attacker was able to move laterally into the parent company’s network.

“As the parent company brings new subsidiaries and affiliates into its fold, there are likely to be visibility issues that can inhibit proper risk management and mitigation,” said Prudhomme. 

Rapid7 recommends that Japanese businesses with a global footprint follow specific steps outlined in the report’s Recommendations section, to reduce their risk of exposure to ransomware and other advanced cyber threats. To access the complete Rapid7 Japan Cyber Threat Landscape Report and related resources, click here. 

# # #

About Rapid7

Rapid7, Inc. (NASDAQ: RPD) is on a mission to create a safer digital world by making cybersecurity simpler and more accessible. We empower security professionals to manage a modern attack surface through our best-in-class technology, leading-edge research, and broad, strategic expertise. Rapid7’s comprehensive security solutions help more than 10,000 global customers unite cloud risk management and threat detection to reduce attack surfaces and eliminate threats with speed and precision. For more information, visit our website, check out our blog, or follow us on LinkedIn or Twitter.


Rapid7 Media Relations

Stacey Holleran

Senior Communications Manager

+1 857—216—7804

press@rapid7.com

Rapid7 Investor Relations

Sunil Shah

Vice President, Investor Relations

+1 857—990—4074

investors@rapid7.com