Eisai Hit by Ransomware Attack, Suspends Systems Access.

Ransomware Attack Hits Japanese Pharmaceutical Company Eisai

Japanese pharmaceutical company Eisai recently announced that a successful ransomware attack forced the company to take a number of its systems offline. The Tokyo-based company, which also has manufacturing facilities across Asia, Europe, and North America, as well as subsidiaries across the globe, reported over $5 billion in revenue last year. The incident occurred on June 3, but the company only disclosed it recently. The attackers were able to encrypt multiple servers and impact the organization both in Japan and overseas. Eisai has not yet revealed whether any data was compromised or stolen during the attack.

Immediate Action Taken

As soon as the company discovered the ransomware attack, it immediately implemented its incident response plan, taking systems offline to contain the attack and initiating an investigation. Eisai Group has set up a company-wide task force, enlisted the aid of external experts, and contacted law enforcement personnel. The attack impacted several servers, including the logistics systems which remain offline even now. However, the company’s corporate websites and email systems remain functional.

Impact on Earnings and Cyber Security

The drug maker, Eisai Group, announced that it has sought advice from external experts and is working on recovery efforts, but any potential impact on the consolidated earnings forecast for the fiscal year is currently under examination. This event raises again the issue of cybersecurity and ransomware attacks, which have become pervasive and are causing organizations to spend vast amounts of funding on cybersecurity measures, particularly during this time when many companies are transitioning to remote working.

Recent Rise in Ransomware Attacks

Eisai is not the first pharmaceutical company to suffer from a ransomware attack, and there has been a recent spurt in ransomware attacks across all sectors, including health insurance, biotechnology, and healthcare in general. Such attacks demonstrate that ransomware gangs not only target high-profile organizations but also small businesses, governments, and non-profit organizations. Ransomware gangs employ various tactics to infiltrate and destabilize their targets, aiming to extract large sums of ransom money, as was evidenced in the 2021 attack on Colonial Pipeline.

The Importance of Strengthening Cyber Security

It is vital to strengthen cybersecurity infrastructure and fortify organizations from such attacks. Experts recommend investing in the latest cybersecurity technologies, including firewalls, antivirus programs, intrusion detection and prevention systems, and user and entity behavior analytics. Additional tips include using strong passwords, implementing a multi-factor authentication procedure, conducting regular cyber awareness and training programs, and having a comprehensive backup and disaster recovery plan.

Editorial: ‘Pay the Ransom’ Not Always a Guarantee Solution

Some organizations are choosing to pay the ransom demanded by attackers to avoid reputational and financial damage. However, paying the ransom is controversial, with some experts arguing it only encourages attackers to conduct further attacks. Additionally, the attackers may not always provide the decryption key, and even if they do, the “cure” may be worse than the ailment itself, as seen in last year’s case of Conti ransomware attackers providing a decryption tool which, in turn, led to even more malware infiltration into targeted organizations.

Conclusion

Eisai has fallen victim to a ransomware attack, which has resulted in the suspension of access to its systems. Reports show that many other companies across several industries are also being targeted. Such attacks prove the need for companies to take cybersecurity measures seriously. Following the best practices of cybersecurity should assist them in preventing or mitigating the impact of a ransomware attack.