Kubota North America Corporation revealed that threat actors compromised its network systems and accessed few resources for over a month in the beginning of 2026.
After an investigation of the breach, the organization discovered that between March and April, the hacker accessed files carrying personal data of employees.
About Kubota
It is a Japanese industrial manufacturer famous for its construction and agricultural work. Kubota has plants in 120 counties and currently employs over 52,000 people. Kubota has an annual revenue of $20 billion.
The North American division consists of facilities that make utility vehicles, tractors, and mowers.
About the data leak
“We discovered that files maintained by our human resources team were accessed as part of this incident. We carefully reviewed these files, and on June 16, 2026, we determined that one or more files may have contained personal information related to certain employees and their dependents,” Kubota reported on its site.
What may have been leaked?
As per the announcement posted on the Kubota USA portal, the following employee information may have been revealed:
- Social security numbers (for dependents too)
- Full employee names (for dependents too)
- Dates of birth (for dependents too)
- IDs of taxpayers
- Bank account details of direct deposit
- Corporate payment card details
- Benefits enrollment data and limited claims information (for dependents too)
- Driver’s license details or other government IDs
Attack tactic
The specific data that was exposed varies per person. Kubota also started sending personalised mails to inform the individuals about the exact impact on them.
The notification information consists step by step instructions for using Kroll identity protection to help the targets address the threats coming from the leak of their personal data.
Kubota has specially advised people to look out for bank accounts and healthcare related statements and promptly report any malicious activity to the concerned authorities.
Safety measures
Kubot has implemented robust security measures to avoid such incidents from happening in the future.
No cybercrime gangs, data extortion gangs, or ransomware gangs have claimed responsibility for the Kubota breach.
Kubota did not report any operational or business disruptions due to the breach.
On ensuring employee safety, Kubota said, “We take the privacy and confidentiality of our employees’ information very seriously. To help prevent something like this from happening again, we have taken and will continue to take steps to further enhance our existing security measures.”
Read the original article: