Cyberattack: Askul shutdown ripples through Japan economyーNHK WORLD-JAPAN NEWS

Key Concepts

• Ransomware Attack: A type of cyberattack where malicious software encrypts a victim's data, and the attackers demand a ransom payment for its decryption.
• B2B Company: Business-to-business company, meaning its primary customers are other businesses.
• Logistics Center: A facility where goods are stored, processed, and prepared for shipment.
• Dark Web: A part of the World Wide Web that is intentionally hidden and requires specific software, configurations, or authorization to access.
• Operating Profit: A company's profit after deducting operating expenses from its revenue.
• Cybersecurity: The practice of protecting systems, networks, and programs from digital attacks.

ASCL Cyber Attack and Wider Economic Impact

Overview of Recent Cyber Incidents in Japan

Recent months have seen significant cyberattacks targeting major Japanese companies. Notably, a ransomware attack on Asahi Breweries disrupted both production and sales, with lingering effects for two months. The latest firm to fall victim is the e-commerce platform ASCL, a case with potentially far-reaching consequences for Japan's economy.

ASCL's Business and Operational Disruption

ASCL, a prominent B2B e-commerce company in Japan, specializes in supplying office supplies, stationery, and medical equipment to businesses. It serves a vast network of 4.69 million registered firms, playing a crucial role in supporting the daily operations of Japanese companies.

The cyberattack on ASCL, which began on October 19th, led to system failures and a halt in operations. The disruption was initially focused on logistics but quickly had wider repercussions. Employees are currently resorting to manual order confirmation and shipping label application at their logistics center in Yokohama, a stark contrast to their usual automated processes. The online system for medical institutions remains offline, impacting their ability to procure essential supplies. ASCL anticipates resuming full operations for its corporate customers in the first half of December.

The Hacker Group and Data Breach

A security expert informed NHK that the hacker group "Ransom House" has claimed responsibility for the ASCL attack. The group reportedly posted a statement on the dark web, asserting that they had obtained over one terabyte of data, which is believed to include client information.

Financial Ramifications of the ASCL Attack

Kazahaya Takahiro, a UBS Securities analyst, has estimated the financial impact on ASCL. The company's operating profit for the current financial year was initially forecast at approximately $70 million. However, the ongoing disruption is now projected to result in a loss of about $880,000 per day. With a month of halted operations, this translates to a loss of $25 million in profit, reducing the annual profit forecast to around $45 million.

Broader Economic and Societal Consequences

The damage extends beyond ASCL itself. The operational shutdown is impacting other businesses, particularly small and medium-sized medical institutions. During the COVID-19 pandemic, ASCL collaborated with the health ministry to supply essential protective gear, masks, and disinfectants. Now, these institutions are struggling to obtain necessary medical supplies due to ASCL's inability to fulfill orders.

ASCL's Cybersecurity Posture and the Evolving Threat Landscape

Contrary to past criticisms of Japanese companies for lax security, ASCL was reportedly well aware of cybersecurity risks. As an e-commerce business, cybersecurity was a top priority for management, recognized as a significant risk factor. The company had implemented various measures to prevent cyberattacks.

Kazahaya suggests that this incident was not due to ASCL's specific vulnerabilities but rather that it became a target among many. He highlights the rapid advancement of hacker capabilities, making it increasingly difficult for individual companies to defend themselves. This underscores the need for a collective approach to cybersecurity, involving not only companies but also the government, as the victims are no longer just individual businesses but entire economies.

Conclusion

The ASCL cyberattack serves as a stark reminder of the escalating threat of ransomware and its potential to cripple businesses and disrupt essential services. The incident highlights the interconnectedness of the economy and the critical need for robust, collaborative cybersecurity strategies to protect against increasingly sophisticated cyber threats. The financial losses for ASCL are substantial, but the broader impact on medical supply chains and the economy at large is a significant concern.