Mazda Motor Corporation (Mazda) has revealed that a security issue discovered last December led to the exposure of data belonging to its employees and business partners.

Mazda is a major Japanese car manufacturer that produces 1.2 million cars each year, generating roughly $24 billion in revenue.

The company stated that hackers took advantage of a flaw in a system used to manage parts warehouses in Thailand. No customer data was present in this system. Furthermore, the breach only affected 692 records.

“Traces of unauthorized external access to a management system used for warehouse operations related to parts procured from Thailand were found,” according to Mazda’s public statement.

“Following this discovery, the Company promptly notified the Personal Information Protection Commission – a Japanese government agency – and implemented appropriate security measures while conducting an investigation with an external expert team.”

The investigation found that the potentially compromised data included these types of information:

• User IDs
• Full names
• Email addresses
• Company names
• Business partner IDs

Even though Mazda hasn’t seen any evidence of misuse of the exposed information, the company advises affected individuals to be careful, due to the increased risk of phishing attempts and other scams.

In addition to notifying the authorities, Mazda enhanced the security of its IT systems by limiting internet access, installing security updates, enhancing monitoring for unusual activity, and enforcing stricter access controls.

Currently, no ransomware gang has publicly claimed responsibility for attacking the Japanese company.

BleepingComputer has reached out to Mazda for more details about the incident and will provide updates as soon as we receive an official response.

Although Mazda never officially acknowledged the data breach, the Clop ransomware group previously posted Mazda.com and MazdaUSA.com on their leak site in November 2025, asserting that they had breached both the Japanese automaker and its American subsidiary.