Kawasaki Motors Europe is recovering from a recent cyberattack attributed to the RansomHub ransomware gang, which has claimed to have stolen four hundred and eighty-seven (487) gigabytes of data from the company. The attack, which occurred in early September 2024, led to the temporary isolation of Kawasaki’s servers as a precautionary measure. The company’s IT department, in collaboration with external cybersecurity experts, spent the following week meticulously checking each server for any suspicious material such as malware before reconnecting them back to the corporate network. Thus far, Kawasaki Motors Europe has restored over 90% of its server functionality, ensuring that operations involving motor vehicle dealers, third-party suppliers, and logistics are not significantly impacted. The company, which reported over $3 billion in earnings last quarter, is a major player in the motor vehicle industry, manufacturing motorcycles, utility vehicles, and other motorized products. The cyberattack has drawn further attention to RansomHub, a ransomware gang that has emerged as a significant threat following the dissolution of earlier gangs like LockBit and AlphV. RansomHub has been linked to at least two hundred and ten (210) ransomware attacks on various organizations since launching in February 2024, according to the FBI and other law enforcement agencies. Notable recent victims include Rite Aid, Frontier, Planned Parenthood, Halliburton, and Christie’s. The group’s tactic involves adding victims to its extortion portal on the dark web, with a timer set to publish stolen data if ransom demands are not met. The timer for Kawasaki was set to expire on Saturday, September 14, 2024. CTIX analysts’ own research found that Kawasaki’s data has indeed been published on the RansomHub leak site. Despite the severity of the attack, Kawasaki has not publicly commented on whether customer data was included in the stolen files. The company has also not responded to media inquiries about the incident.