SOCLYDE logo
Current languageEN
Cybersecurity newsCyberattackCybersecurityAccess management

Advantest confirms personal data theft after ransomware

An October 6, 2026 notice says personal data was extracted during the ransomware incident Advantest discovered in February.

Published on

By Soclyde Team

Engineer examining a silicon wafer in an industrial laboratory

In summary

  • Advantest says an unauthorised party extracted data in February 2026.
  • Notices to affected people list possible data categories; the fields vary for each individual.
  • The total number has not been announced; state notices cover only part of the affected population.

Explore next

Soclyde resources

Article contents

Confirmation months after the intrusion

In a notice dated October 6, 2026, Advantest says an unauthorised party accessed its systems in February and extracted data from its servers. In February, the company disclosed a cybersecurity incident and ransomware deployment while it continued investigating possible exfiltration. The more recent notice confirms that personal information was among the extracted data.

Data categories differ by person

The Massachusetts letter lists possible categories, including contact details, date of birth, identification numbers and medical or financial information. It uses individualised fields to identify the information associated with each recipient. This does not show that every category applies to every person. Advantest says it has no information indicating that data has been publicly disclosed or misused so far.

The total remains unknown

The company has not announced the total number of people affected. SecurityWeek reports that notices filed with several US states list limited groups of residents, but those reports are not a complete count. The confirmed fact of data theft should therefore be separated from the still incomplete public estimate of its scale.

Advice for people who received a notice

Read the letter sent to you and check the categories it explicitly identifies. Advantest is offering identity monitoring to some recipients; follow the official instructions and watch for unusual requests involving your accounts or financial information. A message using a familiar company name is not, by itself, proof that it is genuine.

The connection with Soclyde

When personal information is copied from a server, a password manager cannot erase it or reverse the extraction. Soclyde can help protect and organise account credentials, reducing risks from reused secrets. The response also depends on notifications, identity checks and actions taken by the affected organisation.

Key points

Advantest confirms that some server data was extracted in February, but has not published a total number of affected people. Read your individual notice and verify any request separately. Our guide to a hacked password explains steps to take if an account may also be at risk.

Frequently asked questions

When did the incident happen?

Advantest says it discovered unauthorised access to its systems and data extraction in February 2026. The notice to affected individuals is dated October 6.

What information was stolen?

The notice describes categories that may apply to each recipient, including contact details, date of birth and various identifiers. It does not mean every category applies to every person.

How many people were affected?

Advantest has not announced a global total. Filings with some state attorneys general provide local counts, not the total number worldwide.

References

Sources and references

Need advice?

Design your password strategy with Soclyde

Schedule a dedicated walkthrough with the team to see how local-first security adapts to your stack.

Talk with us

Keep reading